scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
authorHannes Reinecke <hare@suse.de>
Fri, 15 Sep 2017 12:05:16 +0000 (14:05 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 27 Sep 2017 09:00:16 +0000 (11:00 +0200)
commit72896ca30a7f6ceb5238714d5761e4ad4521ccc5
tree108858a93c5b3e63d4a12486f0b6c61408adff63
parentc04996ad58eefbef5d3aafd340ce64aa54661425
scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE

commit 3e0097499839e0fe3af380410eababe5a47c4cf9 upstream.

When calling SG_GET_REQUEST_TABLE ioctl only a half-filled table is
returned; the remaining part will then contain stale kernel memory
information.  This patch zeroes out the entire table to avoid this
issue.

Signed-off-by: Hannes Reinecke <hare@suse.com>
Reviewed-by: Bart Van Assche <bart.vanassche@wdc.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/scsi/sg.c