Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

drivers/char/applicom.c: fix information leak to userland

Structure st_loc is copied to userland with some fields unitialized. It
leads to leaking of stack memory.

Signed-off-by: Vasiliy Kulikov <segooon@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

authored by

Vasiliy Kulikov and committed by
Linus Torvalds
19714a8a ffd7d6ba

+1
+1
drivers/char/applicom.c
··· 566 566 struct mailbox mailbox; 567 567 568 568 /* Got a packet for us */ 569 + memset(&st_loc, 0, sizeof(st_loc)); 569 570 ret = do_ac_read(i, buf, &st_loc, &mailbox); 570 571 spin_unlock_irqrestore(&apbs[i].mutex, flags); 571 572 set_current_state(TASK_RUNNING);