diff options
| author | Jon Maloy <jon.maloy@ericsson.com> | 2018-10-18 18:38:29 +0300 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2018-10-19 02:49:53 +0300 |
| commit | b06f9d9f1a907dd03f203e2ce9e27e318c22ba01 (patch) | |
| tree | cf28a0414f8274c894c184aa833bb38bbb0af7c2 /net/tipc/group.c | |
| parent | b6168562c8ce2bd5a30e213021650422e08764dc (diff) | |
| download | linux-b06f9d9f1a907dd03f203e2ce9e27e318c22ba01.tar.xz | |
tipc: fix info leak from kernel tipc_event
We initialize a struct tipc_event allocated on the kernel stack to
zero to avert info leak to user space.
Reported-by: syzbot+057458894bc8cada4dee@syzkaller.appspotmail.com
Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/tipc/group.c')
| -rw-r--r-- | net/tipc/group.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/tipc/group.c b/net/tipc/group.c index e82f13cb2dc5..06fee142f09f 100644 --- a/net/tipc/group.c +++ b/net/tipc/group.c @@ -666,6 +666,7 @@ static void tipc_group_create_event(struct tipc_group *grp, struct sk_buff *skb; struct tipc_msg *hdr; + memset(&evt, 0, sizeof(evt)); evt.event = event; evt.found_lower = m->instance; evt.found_upper = m->instance; |