RDMA/cxgb4: Fix four byte info leak in c4iw_create_cq()
authorDan Carpenter <dan.carpenter@oracle.com>
Sat, 19 Oct 2013 09:14:35 +0000 (12:14 +0300)
committerBen Hutchings <ben@decadent.org.uk>
Fri, 11 Jul 2014 12:33:44 +0000 (13:33 +0100)
commit e24a72a3302a638d4c6e77f0b40c45cc61c3f089 upstream.

There is a four byte hole at the end of the "uresp" struct after the
->qid_mask member.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Roland Dreier <roland@purestorage.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
drivers/infiniband/hw/cxgb4/cq.c

index 0f1607c..da9364e 100644 (file)
@@ -833,6 +833,7 @@ struct ib_cq *c4iw_create_cq(struct ib_device *ibdev, int entries,
                if (!mm2)
                        goto err4;
 
+               memset(&uresp, 0, sizeof(uresp));
                uresp.qid_mask = rhp->rdev.cqmask;
                uresp.cqid = chp->cq.cqid;
                uresp.size = chp->cq.size;