Re: [PATCH] vduse: prevent uninitialized memory accesses

From: Maxime Coquelin
Date: Mon Aug 29 2022 - 03:23:47 EST




On 8/27/22 08:54, Dan Carpenter wrote:
On Fri, Aug 26, 2022 at 06:16:05PM +0200, Maxime Coquelin wrote:
If the VDUSE application provides a smaller config space
than the driver expects, the driver may use uninitialized
memory from the stack.

This patch prevents it by initializing the buffer passed by
the driver to store the config value.

Signed-off-by: Maxime Coquelin <maxime.coquelin@xxxxxxxxxx>

This sounds like it needs a Fixes tag?

Yes, I actually did it, but somehow forgot to generate the patch bedore
posting.

I'll post a v2 soon.

Thanks,
Maxime

regards,
dan carpenter