On Tue, Jul 04, 2017 at 05:09:19PM +0100, Colin King wrote: > From: Colin Ian King <colin.k...@canonical.com> > > The size of the memset is incorrect, it is currently using the size > of attr (a struct mq_attr *) and not of v (a struct compat_mq_attr)
Folded (and that was a moderate infoleak - ->__reserved[] thing had been copied out uninitialized).