Alan Stern 9705b41015 USB: usbfs: don't leak kernel data in siginfo ...

commit f0c2b68198 upstream.

When a signal is delivered, the information in the siginfo structure
is copied to userspace.  Good security practice dicatates that the
unused fields in this structure should be initialized to 0 so that
random kernel stack data isn't exposed to the user.  This patch adds
such an initialization to the two places where usbfs raises signals.

Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
Reported-by: Dave Mielke <dave@mielke.cc>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>

2015-03-14 15:37:24 -04:00

59 KiB

Raw Blame History

View Raw