浏览代码

IB/core: Avoid leakage from kernel to user space

Clear the reserved field of struct ib_uverbs_async_event_desc which is
copied to user space.

Signed-off-by: Eli Cohen <eli@mellanox.com>
Reviewed-by: Yann Droneaud <ydroneaud@opteya.com>
Signed-off-by: Roland Dreier <roland@purestorage.com>
Eli Cohen 11 年之前
父节点
当前提交
377b513485
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      drivers/infiniband/core/uverbs_main.c

+ 1 - 0
drivers/infiniband/core/uverbs_main.c

@@ -477,6 +477,7 @@ static void ib_uverbs_async_handler(struct ib_uverbs_file *file,
 
 
 	entry->desc.async.element    = element;
 	entry->desc.async.element    = element;
 	entry->desc.async.event_type = event;
 	entry->desc.async.event_type = event;
+	entry->desc.async.reserved   = 0;
 	entry->counter               = counter;
 	entry->counter               = counter;
 
 
 	list_add_tail(&entry->list, &file->async_file->event_list);
 	list_add_tail(&entry->list, &file->async_file->event_list);