fanotify: info leak in copy_event_to_user()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 8 Jul 2013 22:59:40 +0000 (15:59 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 11 Aug 2013 22:38:22 +0000 (15:38 -0700)
commit0157e289c1a4bdcf3ce388dd4024bf59336e38ce
treedb2718b039df5c42474077e55c30e483fa39d53c
parentf34f6f080ecd0677cfc9f7ed173d250a629b045a
fanotify: info leak in copy_event_to_user()

commit de1e0c40aceb9d5bff09c3a3b97b2f1b178af53f upstream.

The ->reserved field isn't cleared so we leak one byte of stack
information to userspace.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: Eric Paris <eparis@redhat.com>
Cc: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Luis Henriques <luis.henriques@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/notify/fanotify/fanotify_user.c