oss-sec mailing list archives

Linux kernel < 4.14.111 drivers/media/dvb-frontends/cxd2841er.c kernel address dumps to user space


From: Fuqian Huang <huangfq.daxian () gmail com>
Date: Thu, 18 Apr 2019 21:31:01 +0800

In drivers/media/dvb-frontends/cxd2841er.c:3856,
function cxd2841er_attach will print the address of
adapter to dmesg, the kernel address is dumpped to
user space.

static struct dvb_frontend *cxd2841er_attach(struct cxd2841er_config *cfg,
                         struct i2c_adapter *i2c,
                         u8 system)
{
    ...
    priv->i2c = i2c;
    dev_info(&priv->i2c->dev,
        "%s(): I2C adapter %p SLVX addr %x SLVT addr %x\n",
        __func__, priv->i2c,
        priv->i2c_addr_slvx, priv->i2c_addr_slvt);
    ...
}


Current thread: