From: Russ Gorby <russ.gorby@intel.com>
Date: Tue, 14 Jun 2011 20:23:29 +0000 (-0700)
Subject: tty: n_gsm: improper skb_pull() use was leaking framed data
X-Git-Tag: v3.0-rc6~30^2~3
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=57f2104f39995bac332ddc492fbf60aa28e0c35e;p=pandora-kernel.git

tty: n_gsm: improper skb_pull() use was leaking framed data

gsm_dlci_data_output_framed() was doing:
memcpy(dp, skb_pull(dlci->skb, len), len);

The problem is skb_pull() returns the post-increment data ptr
so the first chunk of dlci->skb->data is leaked.

Signed-off-by: Russ Gorby <russ.gorby@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
---

Reading git-diff-tree failed