From: Colin Ian King <colin.k...@canonical.com>

The driver_name field is not initialized and hence information
on the stack is being leaked to userspace on the copy_to_user.
Fix this.

Signed-off-by: Colin Ian King <colin.k...@canonical.com>
---
 drivers/scsi/aacraid/commctrl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/scsi/aacraid/commctrl.c b/drivers/scsi/aacraid/commctrl.c
index 614842a..eb48d0a 100644
--- a/drivers/scsi/aacraid/commctrl.c
+++ b/drivers/scsi/aacraid/commctrl.c
@@ -1015,7 +1015,7 @@ static int aac_get_pci_info(struct aac_dev* dev, void 
__user *arg)
 
 static int aac_get_hba_info(struct aac_dev *dev, void __user *arg)
 {
-       struct aac_hba_info hbainfo;
+       struct aac_hba_info hbainfo = { 0 };
 
        hbainfo.adapter_number          = (u8) dev->id;
        hbainfo.system_io_bus_number    = dev->pdev->bus->number;
-- 
2.10.2

Reply via email to