Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
block/scsi-ioctl: Fix kernel-infoleak in scsi_put_cdrom_generic_arg()
scsi_put_cdrom_generic_arg() is copying uninitialized stack memory to userspace, since the compiler may leave a 3-byte hole in the middle of `cgc32`. Fix it by adding a padding field to `struct compat_cdrom_generic_command`. Cc: [email protected] Fixes: f3ee6e6 ("compat_ioctl: move CDROM_SEND_PACKET handling into scsi") Suggested-by: Dan Carpenter <[email protected]> Suggested-by: Arnd Bergmann <[email protected]> Reported-by: [email protected] Signed-off-by: Peilin Ye <[email protected]> Signed-off-by: Jens Axboe <[email protected]>
- Loading branch information