Re: [PATCH 4.1] [media] media/vivid-osd: fix info leak in ioctl

2016-01-27 Thread Yuki Machida
Hi Greg, On 2016年01月26日 02:18, Greg KH wrote: On Mon, Jan 25, 2016 at 07:42:18PM +0900, Yuki Machida wrote: commit eda98796aff0d9bf41094b06811f5def3b4c333c upstream. The vivid_fb_ioctl() code fails to initialize the 16 _reserved bytes of struct fb_vblank after the ->hcount member. Add an

Re: [PATCH 4.1] [media] media/vivid-osd: fix info leak in ioctl

2016-01-25 Thread Greg KH
On Mon, Jan 25, 2016 at 07:42:18PM +0900, Yuki Machida wrote: > commit eda98796aff0d9bf41094b06811f5def3b4c333c upstream. > > The vivid_fb_ioctl() code fails to initialize the 16 _reserved bytes of > struct fb_vblank after the ->hcount member. Add an explicit > memset(0) before filling the

Re: [PATCH 4.1] [media] media/vivid-osd: fix info leak in ioctl

2016-01-25 Thread Yuki Machida
It has sent to the wrong Mainling List. sorry. On 2016年01月25日 19:42, Yuki Machida wrote: commit eda98796aff0d9bf41094b06811f5def3b4c333c upstream. The vivid_fb_ioctl() code fails to initialize the 16 _reserved bytes of struct fb_vblank after the ->hcount member. Add an explicit memset(0)

[PATCH 4.1] [media] media/vivid-osd: fix info leak in ioctl

2016-01-25 Thread Yuki Machida
commit eda98796aff0d9bf41094b06811f5def3b4c333c upstream. The vivid_fb_ioctl() code fails to initialize the 16 _reserved bytes of struct fb_vblank after the ->hcount member. Add an explicit memset(0) before filling the structure to avoid the info leak. This fixes CVE-2015-7884. Signed-off-by: