]> git.ipfire.org Git - thirdparty/linux.git/commit
iio: temperature: tmp006: fix information leak in triggered buffer
authorJavier Carrasco <javier.carrasco.cruz@gmail.com>
Tue, 3 Dec 2024 23:55:31 +0000 (00:55 +0100)
committerJonathan Cameron <Jonathan.Cameron@huawei.com>
Sun, 8 Dec 2024 16:51:35 +0000 (16:51 +0000)
commit2f43d5200c7330143089bfd1f2440753bac10617
tree409d39dfe3f3d5f9e0e174ec0aede4db99b36ad2
parent64f43895b4457532a3cc524ab250b7a30739a1b1
iio: temperature: tmp006: fix information leak in triggered buffer

The 'scan' local struct is used to push data to user space from a
triggered buffer, but it has a hole between the two 16-bit data channels
and the timestamp. This hole is never initialized.

Initialize the struct to zero before using it to avoid pushing
uninitialized information to userspace.

Fixes: 91f75ccf9f03 ("iio: temperature: tmp006: add triggered buffer support")
Signed-off-by: Javier Carrasco <javier.carrasco.cruz@gmail.com>
Link: https://patch.msgid.link/20241204-iio_memset_scan_holes-v2-1-3f941592a76d@gmail.com
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
drivers/iio/temperature/tmp006.c