ALSA: sb16 - info leak in snd_sb_csp_ioctl()
There is a 2 byte hole after "info.func_nr" so we could leak unitialized stack information to userspace. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Takashi Iwai <tiwai@suse.de>
This commit is contained in:
parent
f44f2a5417
commit
bffbbc0a2c
|
@ -208,6 +208,7 @@ static int snd_sb_csp_ioctl(struct snd_hwdep * hw, struct file *file, unsigned i
|
|||
switch (cmd) {
|
||||
/* get information */
|
||||
case SNDRV_SB_CSP_IOCTL_INFO:
|
||||
memset(&info, 0, sizeof(info));
|
||||
*info.codec_name = *p->codec_name;
|
||||
info.func_nr = p->func_nr;
|
||||
info.acc_format = p->acc_format;
|
||||
|
|
Loading…
Reference in New Issue