]> git.baikalelectronics.ru Git - kernel.git/commit
media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
authorTomas Bortoli <tomasbortoli@gmail.com>
Wed, 31 Jul 2019 15:19:05 +0000 (12:19 -0300)
committerMauro Carvalho Chehab <mchehab+samsung@kernel.org>
Wed, 21 Aug 2019 21:39:55 +0000 (18:39 -0300)
commit93539e352aac144218c05cef41247749ecd74089
treea92b5fb5867a07f0e21477b536be2e0adf442d13
parent3dc0b4100da3a516fdf36761db3f58db7a17516e
media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()

The function at issue does not always initialize each byte allocated
for 'b' and can therefore leak uninitialized memory to a USB device in
the call to usb_bulk_msg()

Use kzalloc() instead of kmalloc()

Signed-off-by: Tomas Bortoli <tomasbortoli@gmail.com>
Reported-by: syzbot+0522702e9d67142379f1@syzkaller.appspotmail.com
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
drivers/media/usb/ttusb-dec/ttusb_dec.c