]> git.ipfire.org Git - people/ms/linux.git/commit
projects / people / ms / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 91443ec) | patch
Bluetooth: sco: fix information leak to userspace
authorVasiliy Kulikov <segoon@openwall.com>
Mon, 14 Feb 2011 10:54:26 +0000 (13:54 +0300)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 14 Apr 2011 23:53:32 +0000 (16:53 -0700)
commit1fdae7255ced792c46a1b697aa7f27b2f3b4e322
tree40672cb592fa9978890625cdd826b80298ea69a4tree | snapshot
parent91443ec2144502e9ead5b1f9f03da003c1d4a2f1commit | diff
Bluetooth: sco: fix information leak to userspace

commit c4c896e1471aec3b004a693c689f60be3b17ac86 upstream.

struct sco_conninfo has one padding byte in the end.  Local variable
cinfo of type sco_conninfo is copied to userspace with this uninizialized
one byte, leading to old stack contents leak.

Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/bluetooth/sco.c diff | blob | blame | history
Michael's Linux tree.