Viktor Slavkovic 443064cb0b staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl ...

A lock-unlock is missing in ASHMEM_SET_SIZE ioctl which can result in a
race condition when mmap is called. After the !asma->file check, before
setting asma->size, asma->file can be set in mmap. That would result in
having different asma->size than the mapped memory size. Combined with
ASHMEM_UNPIN ioctl and shrinker invocation, this can result in memory
corruption.

Signed-off-by: Viktor Slavkovic <viktors@google.com>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-01-09 15:32:11 +01:00

..

android

staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl

2018-01-09 15:32:11 +01:00

board

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ccree

staging: ccree: Uninitialized return in ssi_ahash_import()

2017-12-06 15:49:26 +01:00

clocking-wizard

…

comedi

staging: comedi: ni_atmio: fix license warning.

2017-11-28 14:36:45 +01:00

dgnc

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

emxx_udc

…

fbtft

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

fsl-dpaa2

staging: fsl-dpaa2/eth: Extra headroom in RX buffers

2017-11-03 16:19:27 +01:00

fsl-mc

…

fwserial

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

gdm724x

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

goldfish

…

greybus

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

gs_fpgaboot

…

iio

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

irda

treewide: Remove TIMER_FUNC_TYPE and TIMER_DATA_TYPE casts

2017-11-21 16:35:54 -08:00

ks7010

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

lustre

staging: lustre: lnet: Fix recent breakage from list_for_each conversion

2017-12-19 11:51:21 +01:00

media

media: atomisp: stop producing hundreds of kernel-doc warnings

2017-11-30 04:18:38 -05:00

most

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

mt29f_spinand

…

netlogic

…

nvec

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

octeon

…

octeon-usb

staging: octeon-usb: use __delay() instead of cvmx_wait()

2017-11-28 14:36:46 +01:00

olpc_dcon

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

pi433

staging: pi433: Fixes issue with bit shift in rf69_get_modulation

2017-12-06 15:49:26 +01:00

rtl8188eu

staging: rtl8188eu: Fix incorrect response to SIOCGIWESSID

2017-11-28 14:36:45 +01:00

rtl8192e

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

rtl8192u

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

rtl8712

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

rtl8723bs

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

rtlwifi

staging: rtl8822be: fix wrong dma unmap len

2017-11-03 14:49:08 +01:00

rts5208

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

skein

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

sm750fb

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

speakup

treewide: Switch DEFINE_TIMER callbacks to struct timer_list *

2017-11-21 15:57:05 -08:00

typec

staging: typec: tcpci: mark expected switch fall-through in tcpci_to_typec_cc

2017-10-18 16:42:28 +02:00

unisys

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

vboxvideo

Merge tag 'drm-for-v4.15' of git://people.freedesktop.org/~airlied/linux

2017-11-15 20:42:10 -08:00

vc04_services

Merge branch 'work.get_user_pages_fast' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2017-11-17 12:38:51 -08:00

vme

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

vt6655

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

vt6656

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

wilc1000

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

wlan-ng

Merge tag 'usb-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

2017-11-13 21:14:07 -08:00

xgifb

Merge tag 'staging-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2017-11-13 20:53:28 -08:00

Kconfig

…

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00