]> git.karo-electronics.de Git - karo-tx-linux.git/commit
Bluetooth: sco: fix information leak to userspace
authorVasiliy Kulikov <segoon@openwall.com>
Mon, 14 Feb 2011 10:54:26 +0000 (13:54 +0300)
committerPaul Gortmaker <paul.gortmaker@windriver.com>
Sun, 26 Jun 2011 16:47:20 +0000 (12:47 -0400)
commitf8107dd119c9fd62aa0a3d3eb55d67bdd84b8036
tree5c94fe4ed7fe0e70fd2669e04288b1d85ba98ad7
parent973800f01aa1ab2bf5b8a412af07fc2cc568c783
Bluetooth: sco: fix information leak to userspace

commit c4c896e1471aec3b004a693c689f60be3b17ac86 upstream.

struct sco_conninfo has one padding byte in the end.  Local variable
cinfo of type sco_conninfo is copied to userspace with this uninizialized
one byte, leading to old stack contents leak.

Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>
Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>
net/bluetooth/sco.c