Commit 377b5134 authored Sep 14, 2014 by Eli Cohen Committed by Roland Dreier Oct 09, 2014

IB/core: Avoid leakage from kernel to user space



Clear the reserved field of struct ib_uverbs_async_event_desc which is
copied to user space.

Signed-off-by: Eli Cohen <eli@mellanox.com>
Reviewed-by: Yann Droneaud <ydroneaud@opteya.com>
Signed-off-by: Roland Dreier <roland@purestorage.com>

parent 900a6d79

drivers/infiniband/core/uverbs_main.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -477,6 +477,7 @@ static void ib_uverbs_async_handler(struct ib_uverbs_file *file,

		entry->desc.async.element = element;
		entry->desc.async.event_type = event;
		entry->desc.async.reserved = 0;
		entry->counter = counter;

		list_add_tail(&entry->list, &file->async_file->event_list);