tag d70952afa85f2278c64d9812a007f31a9cba319d
tagger Todd Kjos <tkjos@google.com> Fri Jun 05 16:24:01 2020 -0700
object 42844fdbef553cb4996566a9760455df7d1aed66

https://source.android.com/security/bulletin/2020-06-01
CVE-2020-8647
CVE-2020-8648
CVE-2020-8428

commit 42844fdbef553cb4996566a9760455df7d1aed66
author Takashi Iwai <tiwai@suse.de> Mon Sep 03 15:16:43 2018 +0200
committer Lee Jones <lee.jones@linaro.org> Wed Jun 03 08:42:11 2020 +0100
tree ea57d3b45f346e47fe610906d15dca41aba41d7e
parent 8a17a114005eaf36fb76cad07c1e4ea6989b7cc3

ALSA: rawmidi: Initialize allocated buffers

commit 5a7b44a8df822e0667fc76ed7130252523993bda upstream.

syzbot reported the uninitialized value exposure in certain situations
using virmidi loop.  It's likely a very small race at writing and
reading, and the influence is almost negligible.  But it's safer to
paper over this just by replacing the existing kvmalloc() with
kvzalloc().

Reported-by: syzbot+194dffdb8b22fc5d207a@syzkaller.appspotmail.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Change-Id: Ife8f63ec1c583a7723b5b62425ed12fce2159595