diff options
author | Vasiliy Kulikov <segoon@openwall.com> | 2011-02-14 11:54:26 +0100 |
---|---|---|
committer | Gustavo F. Padovan <padovan@profusion.mobi> | 2011-02-14 15:51:40 +0100 |
commit | c4c896e1471aec3b004a693c689f60be3b17ac86 (patch) | |
tree | 7fad770b835cbfe5165fc7027ececc30c165b682 /sound/usb/pcm.c | |
parent | Bluetooth: bnep: fix buffer overflow (diff) | |
download | linux-c4c896e1471aec3b004a693c689f60be3b17ac86.tar.xz linux-c4c896e1471aec3b004a693c689f60be3b17ac86.zip |
Bluetooth: sco: fix information leak to userspace
struct sco_conninfo has one padding byte in the end. Local variable
cinfo of type sco_conninfo is copied to userspace with this uninizialized
one byte, leading to old stack contents leak.
Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>
Diffstat (limited to 'sound/usb/pcm.c')
0 files changed, 0 insertions, 0 deletions