summaryrefslogtreecommitdiffstats
path: root/net/tipc
diff options
context:
space:
mode:
authorJon Maloy <jon.maloy@ericsson.com>2018-10-18 17:38:29 +0200
committerDavid S. Miller <davem@davemloft.net>2018-10-18 16:49:53 -0700
commitb06f9d9f1a907dd03f203e2ce9e27e318c22ba01 (patch)
treecf28a0414f8274c894c184aa833bb38bbb0af7c2 /net/tipc
parentb6168562c8ce2bd5a30e213021650422e08764dc (diff)
downloadlinux-b06f9d9f1a907dd03f203e2ce9e27e318c22ba01.tar.gz
linux-b06f9d9f1a907dd03f203e2ce9e27e318c22ba01.tar.bz2
linux-b06f9d9f1a907dd03f203e2ce9e27e318c22ba01.zip
tipc: fix info leak from kernel tipc_event
We initialize a struct tipc_event allocated on the kernel stack to zero to avert info leak to user space. Reported-by: syzbot+057458894bc8cada4dee@syzkaller.appspotmail.com Signed-off-by: Jon Maloy <jon.maloy@ericsson.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/tipc')
-rw-r--r--net/tipc/group.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/tipc/group.c b/net/tipc/group.c
index e82f13cb2dc5..06fee142f09f 100644
--- a/net/tipc/group.c
+++ b/net/tipc/group.c
@@ -666,6 +666,7 @@ static void tipc_group_create_event(struct tipc_group *grp,
struct sk_buff *skb;
struct tipc_msg *hdr;
+ memset(&evt, 0, sizeof(evt));
evt.event = event;
evt.found_lower = m->instance;
evt.found_upper = m->instance;