diff options
| author |   Oliver Hartkopp <socketcan@hartkopp.net> | 2021-01-12 10:16:43 +0100 |
|---|---|---|
| committer |   Marc Kleine-Budde <mkl@pengutronix.de> | 2021-01-13 22:15:13 +0100 |
| commit | b42b3a2744b3e8f427de79896720c72823af91ad (patch) | |
| tree | 43c6f7295a83253c8e9052ae5cda3286ce54bb51 /net/can | |
| parent | rxrpc: Call state should be read with READ_ONCE() under some circumstances (diff) | |
| download | linux-dev-b42b3a2744b3e8f427de79896720c72823af91ad.tar.xz linux-dev-b42b3a2744b3e8f427de79896720c72823af91ad.zip | |
can: isotp: isotp_getname(): fix kernel information leak
Initialize the sockaddr_can structure to prevent a data leak to user space.
Suggested-by: Cong Wang <xiyou.wangcong@gmail.com>
Reported-by: syzbot+057884e2f453e8afebc8@syzkaller.appspotmail.com
Fixes: e057dd3fc20f ("can: add ISO 15765-2:2016 transport protocol")
Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
Link: https://lore.kernel.org/r/20210112091643.11789-1-socketcan@hartkopp.net
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
Diffstat (limited to 'net/can')
| -rw-r--r-- | net/can/isotp.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/can/isotp.c b/net/can/isotp.c index 7839c3b9e5be..3ef7f78e553b 100644 --- a/net/can/isotp.c +++ b/net/can/isotp.c @@ -1155,6 +1155,7 @@ static int isotp_getname(struct socket *sock, struct sockaddr *uaddr, int peer) if (peer) return -EOPNOTSUPP; + memset(addr, 0, sizeof(*addr)); addr->can_family = AF_CAN; addr->can_ifindex = so->ifindex; addr->can_addr.tp.rx_id = so->rxid; |