diff options
| author | Jonathan Cameron <jonathan.cameron@oss.qualcomm.com> | 2026-08-03 02:22:24 +0100 |
|---|---|---|
| committer | Jonathan Cameron <jonathan.cameron@oss.qualcomm.com> | 2026-08-31 00:52:41 +0100 |
| commit | 5330036bc68d23672bfcc16c60c54701ae123083 (patch) | |
| tree | 8016ed99cf73ac4372207e92bcbf1ff1d8f425fb /tools/lib/python/kdoc/python_version.py | |
| parent | 1a7c522a35477d70320bd64aba8e9de0c1058c6f (diff) | |
| download | linux-next-5330036bc68d23672bfcc16c60c54701ae123083.tar.gz linux-next-5330036bc68d23672bfcc16c60c54701ae123083.zip | |
iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
iio_push_to_buffers_with_ts_unaligned() leaks uninitialized heap memory
to userspace if the data passed in is not a multiple of 8 bytes and the
timestamp is enabled. Specify __GFP_ZERO for the devm_krealloc()
to ensure any extra space is cleared.
Fixes: 95ec3fdf2b79 ("iio: core: Introduce iio_push_to_buffers_with_ts_unaligned()")
Reported-by: Sashiko <sashiko-bot@kernel.org>
Closes: https://sashiko.dev/#/patchset/20260529121005.1470-1-kimjinseob88%40gmail.com
Reviewed-by: Andy Shevchenko <andriy.shevchenko@intel.com>
Reviewed-by: Joshua Crofts <joshua.crofts1@gmail.com>
Reviewed-by: Nuno Sá <nuno.sa@analog.com>
Cc: <Stable@vger.kernel.org>
Signed-off-by: Jonathan Cameron <jonathan.cameron@oss.qualcomm.com>
Diffstat (limited to 'tools/lib/python/kdoc/python_version.py')
0 files changed, 0 insertions, 0 deletions