]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
authorTomas Bortoli <tomasbortoli@gmail.com>
Wed, 31 Jul 2019 15:19:05 +0000 (12:19 -0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 5 Oct 2019 10:30:28 +0000 (12:30 +0200)
commit70d5b96a1ed385a0ef520a44a18fbf6d795f1b84
treecec4d90ecd082346f4c65dd229bef2f1558ac7ce
parent33bdbb12e279f1c0e11687d529c18db88c17ec38
media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()

[ Upstream commit a10feaf8c464c3f9cfdd3a8a7ce17e1c0d498da1 ]

The function at issue does not always initialize each byte allocated
for 'b' and can therefore leak uninitialized memory to a USB device in
the call to usb_bulk_msg()

Use kzalloc() instead of kmalloc()

Signed-off-by: Tomas Bortoli <tomasbortoli@gmail.com>
Reported-by: syzbot+0522702e9d67142379f1@syzkaller.appspotmail.com
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/media/usb/ttusb-dec/ttusb_dec.c