RDMA/cxgb4: four byte info leak in c4iw_create_cq()

PATCH New Dan Carpenter 1 participant 1 message Oct 19, 2013

Subsystems (3)

Kernel janitors InfiniBand CXGB4 iWARP RNIC driver (IW_CXGB4)

lore

Share & tools

lore

Dan Carpenter

author

2013-10-19 09:14 UTC #0 lore raw

PATCH 1/1 RDMA/cxgb4: four byte info leak in c4iw_create_cq()

There is a four byte hole at the end of the "uresp" struct after the ->qid_mask member.

Signed-off-by Dan Carpenter <[email protected]>

drivers/infiniband/hw/cxgb4/cq.c +1 -0

index 88de3aa..e436ead 100644
@@ -930,6 +930,7 @@ struct ib_cq *c4iw_create_cq(struct ib_device *ibdev, int entries,
 		if (!mm2)
 			goto err4;
 
+		memset(&uresp, 0, sizeof(uresp));
 		uresp.qid_mask = rhp->rdev.cqmask;
 		uresp.cqid = chp->cq.cqid;
 		uresp.size = chp->cq.size;