mirror of
https://github.com/followmsi/android_kernel_google_msm.git
synced 2024-11-06 23:17:41 +00:00
usb: misc: sisusbvga: fix information leak to userland
Structure sisusb_info is copied to userland with "sisusb_reserved" field uninitialized. It leads to leaking of contents of kernel stack memory. Signed-off-by: Vasiliy Kulikov <segooon@gmail.com> Cc: stable <stable@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
This commit is contained in:
parent
28609d4083
commit
5dc92cf1d0
1 changed files with 1 additions and 0 deletions
|
@ -3008,6 +3008,7 @@ sisusb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
|
|||
#else
|
||||
x.sisusb_conactive = 0;
|
||||
#endif
|
||||
memset(x.sisusb_reserved, 0, sizeof(x.sisusb_reserved));
|
||||
|
||||
if (copy_to_user((void __user *)arg, &x, sizeof(x)))
|
||||
retval = -EFAULT;
|
||||
|
|
Loading…
Reference in a new issue