Re: ALSA: compress: Memset timestamp structure to zero.

From: Vinod Koul
Date: Tue Aug 23 2016 - 11:53:46 EST


On Tue, Aug 23, 2016 at 03:45:38PM +0200, Takashi Iwai wrote:
> On Tue, 23 Aug 2016 15:40:37 +0200,
> Luis Henriques wrote:
> >
> > From: Krishnankutty Kolathappilly <kkolat@xxxxxxxxxxxxxx>
> >
> > snd_compr_tstamp is initialized using aggregate initialization
> > that does not zero out the padded bytes. Initialize timestamp
> > structure to zero using memset to avoid this.
> >
> > CRs-Fixed: 568717
> > Change-Id: I7a7d188705161f06201f1a1f2945bb6acd633d5d
> > Signed-off-by: Krishnankutty Kolathappilly <kkolat@xxxxxxxxxxxxxx>
>
> Vinod already informed me about this, and we agreed that it doesn't
> make any sense. What does it really fix?

Btw is there a process to make this CVE invalidated?

--
~Vinod