scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
authorHannes Reinecke <hare@suse.de>
Fri, 15 Sep 2017 12:05:16 +0000 (14:05 +0200)
committerRaspbian kernel package updater <root@raspbian.org>
Sun, 8 Oct 2017 01:09:25 +0000 (01:09 +0000)
commit9239f2cc844d2d97697c7264b3cf915b294de607
tree62d163dd01e38a5c94a30165b03ca99a63d5fd1e
parent0d1ab812848f3422f7adb6163a5d8800dd46d861
scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE

commit 3e0097499839e0fe3af380410eababe5a47c4cf9 upstream.

When calling SG_GET_REQUEST_TABLE ioctl only a half-filled table is
returned; the remaining part will then contain stale kernel memory
information.  This patch zeroes out the entire table to avoid this
issue.

Signed-off-by: Hannes Reinecke <hare@suse.com>
Reviewed-by: Bart Van Assche <bart.vanassche@wdc.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/scsi/sg.c