oss-sec mailing list archives

Linux kernel < 4.14.111 drivers/media/dvb-frontends/horus3a.c kernel address dumps to user space


From: Fuqian Huang <huangfq.daxian () gmail com>
Date: Thu, 18 Apr 2019 21:31:52 +0800

In drivers/media/dvb-frontends/horus3a.c:1005,
function horus3a_attach will print the address of
adapter to dmesg, the kernel address is dumpped to
user space.

struct dvb_frontend *horus3a_attach(struct dvb_frontend *fe,
                    const struct horus3a_config *config,
                    struct i2c_adapter *i2c)
{
    ...
    priv->i2c = i2c;
    ...
    dev_info(&priv->i2c->dev,
        "Sony HORUS3A attached on addr=%x at I2C adapter %p\n",
        priv->i2c_address, priv->i2c);
    return fe;
}


Current thread: