]> git.kernelconcepts.de Git - karo-tx-linux.git/commit
Bluetooth: sco: fix information leak to userspace
authorVasiliy Kulikov <segoon@openwall.com>
Mon, 14 Feb 2011 10:54:26 +0000 (13:54 +0300)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 14 Apr 2011 23:53:01 +0000 (16:53 -0700)
commita578aadd26d69db27e80f01fbb88a7b91d4c7500
tree3815f1a52e4c44a890211d64f358f8ee0dd9b771
parenteb73bca39f4f5f2d5285dcb1dc1aa35433d89cef
Bluetooth: sco: fix information leak to userspace

commit c4c896e1471aec3b004a693c689f60be3b17ac86 upstream.

struct sco_conninfo has one padding byte in the end.  Local variable
cinfo of type sco_conninfo is copied to userspace with this uninizialized
one byte, leading to old stack contents leak.

Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/bluetooth/sco.c