fanotify: info leak in copy_event_to_user()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 8 Jul 2013 22:59:40 +0000 (15:59 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 11 Aug 2013 22:38:43 +0000 (15:38 -0700)
commit6c9ef8363ab2802bb8f418f32bb9f83d48c9da2a
treeca0c8ff7927aeefc68257afa2d37d461d434b98f
parent1836cd176170d39f5b1fda9cd47d3c3f0f10dad2
fanotify: info leak in copy_event_to_user()

commit de1e0c40aceb9d5bff09c3a3b97b2f1b178af53f upstream.

The ->reserved field isn't cleared so we leak one byte of stack
information to userspace.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: Eric Paris <eparis@redhat.com>
Cc: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Luis Henriques <luis.henriques@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/notify/fanotify/fanotify_user.c