Commit b06f9d9f authored by Jon Maloy's avatar Jon Maloy Committed by David S. Miller

tipc: fix info leak from kernel tipc_event

We initialize a struct tipc_event allocated on the kernel stack to
zero to avert info leak to user space.

Reported-by: syzbot+057458894bc8cada4dee@syzkaller.appspotmail.com
Signed-off-by: default avatarJon Maloy <jon.maloy@ericsson.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent b6168562
...@@ -666,6 +666,7 @@ static void tipc_group_create_event(struct tipc_group *grp, ...@@ -666,6 +666,7 @@ static void tipc_group_create_event(struct tipc_group *grp,
struct sk_buff *skb; struct sk_buff *skb;
struct tipc_msg *hdr; struct tipc_msg *hdr;
memset(&evt, 0, sizeof(evt));
evt.event = event; evt.event = event;
evt.found_lower = m->instance; evt.found_lower = m->instance;
evt.found_upper = m->instance; evt.found_upper = m->instance;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment