Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 19714a8a authored by Vasiliy Kulikov's avatar Vasiliy Kulikov Committed by Linus Torvalds
Browse files

drivers/char/applicom.c: fix information leak to userland 



Structure st_loc is copied to userland with some fields unitialized.  It
leads to leaking of stack memory.

Signed-off-by: default avatarVasiliy Kulikov <segooon@gmail.com>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
parent ffd7d6ba

drivers/char/applicom.c

+1 −0
Original line number Diff line number Diff line
@@ -566,6 +566,7 @@ static ssize_t ac_read (struct file *filp, char __user *buf, size_t count, loff_ 
				struct mailbox mailbox;



				/* Got a packet for us */

				memset(&st_loc, 0, sizeof(st_loc));

				ret = do_ac_read(i, buf, &st_loc, &mailbox);

				spin_unlock_irqrestore(&apbs[i].mutex, flags);

				set_current_state(TASK_RUNNING);