ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory
authorDan Rosenberg <drosenberg@vsecurity.com>
Sat, 25 Sep 2010 15:07:27 +0000 (11:07 -0400)
committerGreg Kroah-Hartman <gregkh@suse.de>
Fri, 29 Oct 2010 04:43:52 +0000 (21:43 -0700)
commit5d9f8aacedbc1a16a160201a29ade712dd02ad65
tree0f836fe6310277a2adb08c322386657c160125af
parent428a771adddeb9d1cba266700049707d2bbec71c
ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory

commit e68d3b316ab7b02a074edc4f770e6a746390cb7d upstream.

The SNDRV_HDSP_IOCTL_GET_CONFIG_INFO and
SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioctls in hdspm.c and hdsp.c allow
unprivileged users to read uninitialized kernel stack memory, because
several fields of the hdsp{m}_config_info structs declared on the stack
are not altered or zeroed before being copied back to the user.  This
patch takes care of it.

Signed-off-by: Dan Rosenberg <dan.j.rosenberg@gmail.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
sound/pci/rme9652/hdsp.c
sound/pci/rme9652/hdspm.c