mirror of https://github.com/torvalds/linux.git
In the "pmcmd_ioctl" function, three memory objects allocated by
kmalloc are initialized by "hcall_get_cpu_state", which are then
copied to user space. The initializer is indeed implemented in
"acrn_hypercall2" (arch/x86/include/asm/acrn.h). There is a risk of
information leakage due to uninitialized bytes.
Fixes:
|
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| acrn_drv.h | ||
| hsm.c | ||
| hypercall.h | ||
| ioeventfd.c | ||
| ioreq.c | ||
| irqfd.c | ||
| mm.c | ||
| vm.c | ||