diff options
| author | Zhen Ni <[email protected]> | 2025-09-28 06:37:37 +0000 |
|---|---|---|
| committer | Dmitry Torokhov <[email protected]> | 2025-09-29 04:29:03 +0000 |
| commit | d3366a04770eea807f2826cbdb96934dd8c9bf79 (patch) | |
| tree | c784d41db269eb74c16f34c8a0ffc1e4867993ca /tools/lib/traceevent/plugins/plugin_function.c | |
| parent | Input: aw86927 - add driver for Awinic AW86927 (diff) | |
| download | kernel-d3366a04770eea807f2826cbdb96934dd8c9bf79.tar.gz kernel-d3366a04770eea807f2826cbdb96934dd8c9bf79.zip | |
Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
Struct ff_effect_compat is embedded twice inside
uinput_ff_upload_compat, contains internal padding. In particular, there
is a hole after struct ff_replay to satisfy alignment requirements for
the following union member. Without clearing the structure,
copy_to_user() may leak stack data to userspace.
Initialize ff_up_compat to zero before filling valid fields.
Fixes: 2d56f3a32c0e ("Input: refactor evdev 32bit compat to be shareable with uinput")
Cc: [email protected]
Signed-off-by: Zhen Ni <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Dmitry Torokhov <[email protected]>
Diffstat (limited to 'tools/lib/traceevent/plugins/plugin_function.c')
0 files changed, 0 insertions, 0 deletions