Bluetooth: sco: fix information leak to userspace

Browse source

struct sco_conninfo has one padding byte in the end.  Local variable
cinfo of type sco_conninfo is copied to userspace with this uninizialized
one byte, leading to old stack contents leak.

Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>

...

This commit is contained in:

Vasiliy Kulikov 2011-02-14 13:54:26 +03:00 • committed by Gustavo F. Padovan

parent 43629f8f5e

commit c4c896e147

1 changed files with 1 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

net/bluetooth/sco.c

View file