Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

staging: ft1000: fix kernel info leak to userland for statistics

get_stat_data is not fully initialized before copy_to_user() call,
e.g. LedStat is not always set.

Signed-off-by: Vasiliy Kulikov <segooon@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

authored by

Vasiliy Kulikov and committed by
Greg Kroah-Hartman
86ee1e49 b7378b9e

+1 -1
+1 -1
drivers/staging/ft1000/ft1000-usb/ft1000_chdev.c
··· 616 616 break; 617 617 case IOCTL_GET_DSP_STAT_CMD: 618 618 //DEBUG("FT1000:ft1000_ChIoctl: IOCTL_FT1000_GET_DSP_STAT called\n"); 619 - 619 + memset(&get_stat_data, 0, sizeof(get_stat_data)); 620 620 memcpy(get_stat_data.DspVer, info->DspVer, DSPVERSZ); 621 621 memcpy(get_stat_data.HwSerNum, info->HwSerNum, HWSERNUMSZ); 622 622 memcpy(get_stat_data.Sku, info->Sku, SKUSZ);