qlcnic: info leak in qlcnic_dcb_peer_app_info()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 23 May 2014 16:37:21 +0000 (19:37 +0300)
committerJiri Slaby <jslaby@suse.cz>
Mon, 23 Jun 2014 08:27:57 +0000 (10:27 +0200)
[ Upstream commit 7df566bbdd0af0785542b89466a937e94257fcfb ]

This function is called from dcbnl_build_peer_app().  The "info"
struct isn't initialized at all so we disclose 2 bytes of uninitialized
stack data.  We should clear it before passing it to the user.

Fixes: 48365e485275 ('qlcnic: dcb: Add support for CEE Netlink interface.')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
drivers/net/ethernet/qlogic/qlcnic/qlcnic_dcb.c

index d62d5ce432ec7525ca3f504b790d050797f343d2..d677eabf3c1ef0e270f8f978986ddbb3d15d1f30 100644 (file)
@@ -1053,6 +1053,7 @@ static int qlcnic_dcb_peer_app_info(struct net_device *netdev,
        struct qlcnic_dcb_cee *peer;
        int i;
 
+       memset(info, 0, sizeof(*info));
        *app_count = 0;
 
        if (!test_bit(__QLCNIC_DCB_STATE, &adapter->state))