Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

ALSA: sb16 - info leak in snd_sb_csp_ioctl()

There is a 2 byte hole after "info.func_nr" so we could leak unitialized
stack information to userspace.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>

authored by

Dan Carpenter and committed by
Takashi Iwai
bffbbc0a f44f2a54

+1
+1
sound/isa/sb/sb16_csp.c
··· 208 208 switch (cmd) { 209 209 /* get information */ 210 210 case SNDRV_SB_CSP_IOCTL_INFO: 211 + memset(&info, 0, sizeof(info)); 211 212 *info.codec_name = *p->codec_name; 212 213 info.func_nr = p->func_nr; 213 214 info.acc_format = p->acc_format;