Messages in this thread | | | Date | Fri, 18 Aug 2017 16:22:19 -0700 (PDT) | Subject | Re: [PATCH] irda: do not leak initialized list.dev to userspace | From | David Miller <> |
| |
From: Colin King <colin.king@canonical.com> Date: Thu, 17 Aug 2017 23:14:58 +0100
> From: Colin Ian King <colin.king@canonical.com> > > list.dev has not been initialized and so the copy_to_user is copying > data from the stack back to user space which is a potential > information leak. Fix this ensuring all of list is initialized to > zero. > > Detected by CoverityScan, CID#1357894 ("Uninitialized scalar variable") > > Signed-off-by: Colin Ian King <colin.king@canonical.com>
Applied and queued up for -stable, thanks.
| |