]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS
authorKangjie Lu <kangjielu@gmail.com>
Tue, 3 May 2016 20:44:07 +0000 (16:44 -0400)
committerChuck Anderson <chuck.anderson@oracle.com>
Wed, 9 Nov 2016 22:02:46 +0000 (14:02 -0800)
commit6be02256f430f800f8bc804a6fc4f72c705428e8
tree34de3e32186a527e06ae350820323d06b3ddc408
parent5667a7978d10167b82948d1c11b8aed9db5f0c71
ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS

The stack object “tread” has a total size of 32 bytes. Its field
“event” and “val” both contain 4 bytes padding. These 8 bytes
padding bytes are sent to user without being initialized.

Signed-off-by: Kangjie Lu <kjlu@gatech.edu>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Orabug: 25059408
CVE: CVE-2016-4569
Mainline v4.7 commit cec8f96e49d9be372fdb0c3836dcf31ec71e457e
Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
sound/core/timer.c