projects / profile / mobile / platform / kernel / linux-3.10-sc7730.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b69ed9d) | patch
ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS 54/154954/1
authorKangjie Lu <kangjielu@gmail.com>
Tue, 3 May 2016 20:44:07 +0000 (16:44 -0400)
committerSeung-Woo Kim <sw0312.kim@samsung.com>
Wed, 11 Oct 2017 12:28:11 +0000 (21:28 +0900)
commitd48662cd025fbc0e79aff7f6802443f9694254cf
treee82da846b4a51c8bd061df0f7373e0cc7d501b45tree | snapshot
parentb69ed9d5c63d94d0c7c961c62d32760e9b64dfbdcommit | diff
ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS

commit cec8f96e49d9be372fdb0c3836dcf31ec71e457e upstream.

The stack object â\80\9ctreadâ\80\9d has a total size of 32 bytes. Its field
â\80\9ceventâ\80\9d and â\80\9cvalâ\80\9d both contain 4 bytes padding. These 8 bytes
padding bytes are sent to user without being initialized.

Signed-off-by: Kangjie Lu <kjlu@gatech.edu>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Willy Tarreau <w@1wt.eu>
[sw0312.kim: cherry-pick from linux-3.10.y to fix CVE-2016-4569]
Signed-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>
Change-Id: I6b1d724d95496f16248abcdcdbed2d3b2136b58f
sound/core/timer.c diff | blob | history
Domain: System / Kernel;