eca67aaeeb
Structure iowarrior_info is copied to userland with padding byted between "serial" and "revision" fields uninitialized. It leads to leaking of contents of kernel stack memory. Signed-off-by: Vasiliy Kulikov <segooon@gmail.com> Cc: stable <stable@kernel.org> Acked-by: Kees Cook <kees.cook@canonical.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> |
||
---|---|---|
.. | ||
sisusbvga | ||
adutux.c | ||
appledisplay.c | ||
cypress_cy7c63.c | ||
cytherm.c | ||
emi26.c | ||
emi62.c | ||
ftdi-elan.c | ||
idmouse.c | ||
iowarrior.c | ||
isight_firmware.c | ||
Kconfig | ||
ldusb.c | ||
legousbtower.c | ||
Makefile | ||
rio500_usb.h | ||
rio500.c | ||
trancevibrator.c | ||
usb_u132.h | ||
usblcd.c | ||
usbled.c | ||
usbsevseg.c | ||
usbtest.c | ||
uss720.c | ||
yurex.c |