Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

James Hogan 641ddffc6f metag/uaccess: Check access_ok in strncpy_from_user ... commit 3a158a62da upstream. The metag implementation of strncpy_from_user() doesn't validate the src pointer, which could allow reading of arbitrary kernel memory. Add a short access_ok() check to prevent that. Its still possible for it to read across the user/kernel boundary, but it will invariably reach a NUL character after only 9 bytes, leaking only a static kernel address being loaded into D0Re0 at the beginning of __start, which is acceptable for the immediate fix. Reported-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: James Hogan <james.hogan@imgtec.com> Cc: linux-metag@vger.kernel.org Signed-off-by: Ben Hutchings <ben@decadent.org.uk>		History 2017-08-26 02:14:45 +01:00
..
boot	metag: tz1090: instantiate gpio-tz1090-pdc	2013-07-22 10:55:31 +01:00
configs	metag: minimal TZ1090 (Comet) SoC infrastructure	2013-06-13 12:14:07 +01:00
include	metag/uaccess: Check access_ok in strncpy_from_user	2017-08-26 02:14:45 +01:00
kernel	of/fdt: consolidate built-in dtb section variables	2014-04-30 00:59:13 -05:00
lib	metag/usercopy: Add missing fixups	2017-07-18 18:40:32 +01:00
mm	vm: add VM_FAULT_SIGSEGV handling support	2015-02-04 10:58:27 +00:00
oprofile	metag: OProfile support	2013-03-15 13:21:05 +00:00
tbx	metag: handle low level kicks directly	2013-11-06 10:40:02 +00:00
Kconfig	Kconfig: rename HAS_IOPORT to HAS_IOPORT_MAP	2014-04-07 16:36:11 -07:00
Kconfig.debug	consolidate per-arch stack overflow debugging options	2013-07-04 11:25:39 -07:00
Kconfig.soc	metag: tz1090: select and instantiate gpio-tz1090	2013-07-22 10:55:31 +01:00
Makefile	metag: minimal TZ1090 (Comet) SoC infrastructure	2013-06-13 12:14:07 +01:00