Commit 11cb3996 authored Jun 11, 2018 by Tejaswi Tanikella Committed by Subash Abhinov Kasiviswanathan Jul 26, 2018

net: sockev: fix uninitialized data leak into userspace



Socket event string, notifying userspace of socket event, can leak
data into userspace. Memset it before filling it using strlcpy.

Change-Id: I37851f32a1b7ce3307644998c2cc7dd617bb7022
Signed-off-by: Tejaswi Tanikella <tejaswit@codeaurora.org>

parent 130b5c4c

net/core/sockev_nlmcast.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -37,6 +37,8 @@ static struct netlink_kernel_cfg nlcfg = {

		static void _sockev_event(unsigned long event, __u8 *evstr, int buflen)
		{
		memset(evstr, 0, buflen);

		switch (event) {
		case SOCKEV_SOCKET:
		strlcpy(evstr, "SOCKEV_SOCKET", buflen);