Re: [PATCH] bluetooth: hidp: fix information leak to userland
From: Marcel Holtmann <hidden>
Date: 2010-11-02 15:36:53
Also in:
kernel-janitors, linux-bluetooth, lkml
From: Marcel Holtmann <hidden>
Date: 2010-11-02 15:36:53
Also in:
kernel-janitors, linux-bluetooth, lkml
Hi Vasiliy,
Structure hidp_conninfo is copied to userland with version, product, vendor and name fields unitialized if both session->input and session->hid are NULL. It leads to leaking of contents of kernel stack memory. Signed-off-by: Vasiliy Kulikov <redacted>
Acked-by: Marcel Holtmann <redacted> Regards Marcel