projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6f005ab) | patch
media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
authorTomas Bortoli <tomasbortoli@gmail.com>
Wed, 31 Jul 2019 15:19:05 +0000 (12:19 -0300)
committerMauro Carvalho Chehab <mchehab+samsung@kernel.org>
Wed, 21 Aug 2019 21:39:55 +0000 (18:39 -0300)
commita10feaf8c464c3f9cfdd3a8a7ce17e1c0d498da1
treea92b5fb5867a07f0e21477b536be2e0adf442d13tree | snapshot
parent6f005abb00848556a6bff1d3bc8a76f7dc2f9c24commit | diff
media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()

The function at issue does not always initialize each byte allocated
for 'b' and can therefore leak uninitialized memory to a USB device in
the call to usb_bulk_msg()

Use kzalloc() instead of kmalloc()

Signed-off-by: Tomas Bortoli <tomasbortoli@gmail.com>
Reported-by: syzbot+0522702e9d67142379f1@syzkaller.appspotmail.com
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
drivers/media/usb/ttusb-dec/ttusb_dec.c diff | blob | history
Domain: System / Kernel;