[Midnightbsd-cvs] src [7613] fix a security issue where the memory is not cleared before returning to userland

[laffer1 at midnightbsd.org]

Revision: 7613
          http://svnweb.midnightbsd.org/src/?rev=7613
Author:   laffer1
Date:     2016-05-31 13:58:20 -0400 (Tue, 31 May 2016)
Log Message:
-----------
fix a security issue where the memory is not cleared before returning to userland

Modified Paths:
--------------
    trunk/sys/compat/linux/linux_ioctl.c
    trunk/sys/compat/linux/linux_misc.c

Property Changed:
----------------
    trunk/sys/compat/linux/linux_ioctl.c

Modified: trunk/sys/compat/linux/linux_ioctl.c
===================================================================
--- trunk/sys/compat/linux/linux_ioctl.c	2016-05-30 20:40:17 UTC (rev 7612)
+++ trunk/sys/compat/linux/linux_ioctl.c	2016-05-31 17:58:20 UTC (rev 7613)
@@ -29,7 +29,7 @@
 #include "opt_compat.h"
 
 #include <sys/cdefs.h>
-__MBSDID("$MidnightBSD: src/sys/compat/linux/linux_ioctl.c,v 1.4 2013/01/08 00:27:47 laffer1 Exp $");
+__MBSDID("$MidnightBSD$");
 
 #include <sys/param.h>
 #include <sys/systm.h>
@@ -911,6 +911,8 @@
 
 	case LINUX_TIOCGSERIAL: {
 		struct linux_serial_struct lss;
+
+		bzero(&lss, sizeof(lss));
 		lss.type = LINUX_PORT_16550A;
 		lss.flags = 0;
 		lss.close_delay = 0;


Property changes on: trunk/sys/compat/linux/linux_ioctl.c
___________________________________________________________________
Deleted: cvs2svn:cvs-rev
## -1 +0,0 ##
-1.5
\ No newline at end of property
Modified: trunk/sys/compat/linux/linux_misc.c
===================================================================
--- trunk/sys/compat/linux/linux_misc.c	2016-05-30 20:40:17 UTC (rev 7612)
+++ trunk/sys/compat/linux/linux_misc.c	2016-05-31 17:58:20 UTC (rev 7613)
@@ -124,6 +124,7 @@
 	int i, j;
 	struct timespec ts;
 
+	bzero(&sysinfo, sizeof(sysinfo));
 	getnanouptime(&ts);
 	if (ts.tv_nsec != 0)
 		ts.tv_sec++;