kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-18 19:12:56 +00:00
Code Issues Releases Packages Activity
linux/drivers/tty/vt
History
Adam Borowski 63c634cf95 vt: fix unchecked __put_user() in tioclinux ioctls 
commit 6987dc8a70 upstream.

Only read access is checked before this call.

Actually, at the moment this is not an issue, as every in-tree arch does
the same manual checks for VERIFY_READ vs VERIFY_WRITE, relying on the MMU
to tell them apart, but this wasn't the case in the past and may happen
again on some odd arch in the future.

If anyone cares about 3.7 and earlier, this is a security hole (untested)
on real 80386 CPUs.

Signed-off-by: Adam Borowski <kilobyte@angband.pl>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2017-07-21 07:42:22 +02:00
..
.gitignore TTY: move .gitignore from drivers/char/ to drivers/tty/vt/ 2010-11-05 22:18:23 -07:00
consolemap.c tty: vt, ignore PIO_UNIMAPCLR param 2016-06-25 09:04:48 -07:00
cp437.uni TTY: create drivers/tty/vt and move the vt code there 2010-11-05 08:16:52 -07:00
defkeymap.c_shipped TTY: create drivers/tty/vt and move the vt code there 2010-11-05 08:16:52 -07:00
defkeymap.map TTY: create drivers/tty/vt and move the vt code there 2010-11-05 08:16:52 -07:00
keyboard.c vt: fix Scroll Lock LED trigger name 2017-01-09 08:32:21 +01:00
Makefile tty: vt/Makefile: set the variables to static 2013-01-15 21:52:24 -08:00
selection.c tty: Replace TTY_THROTTLED bit tests with tty_throttled() 2016-04-30 09:26:55 -07:00
vc_screen.c vc: switch to fixed_size_llseek() 2013-06-29 12:57:30 +04:00
vt.c vt: fix unchecked __put_user() in tioclinux ioctls 2017-07-21 07:42:22 +02:00
vt_ioctl.c tty: vt, ignore PIO_UNIMAPCLR param 2016-06-25 09:04:48 -07:00