]> git.karo-electronics.de Git - karo-tx-linux.git/commit
wext: fix potential private ioctl memory content leak
authorJohannes Berg <johannes.berg@intel.com>
Thu, 16 Sep 2010 22:38:25 +0000 (00:38 +0200)
committerGreg Kroah-Hartman <gregkh@suse.de>
Mon, 21 Mar 2011 19:43:17 +0000 (12:43 -0700)
commit99d1bac7375639ceb89e20f5a56b000a2fbf434b
tree13215c4ca2ebb328d058ba1f49ff297c5a2ca26f
parent027e59fe6262fc24b38b5a734029e5289bb0b9f6
wext: fix potential private ioctl memory content leak

commit df6d02300f7c2fbd0fbe626d819c8e5237d72c62 upstream.

When a driver doesn't fill the entire buffer, old
heap contents may remain, and if it also doesn't
update the length properly, this old heap content
will be copied back to userspace.

It is very unlikely that this happens in any of
the drivers using private ioctls since it would
show up as junk being reported by iwpriv, but it
seems better to be safe here, so use kzalloc.

Reported-by: Jeff Mahoney <jeffm@suse.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/wireless/wext-priv.c