Dan Rosenberg a0846f1868 USB: serial/mos*: prevent reading uninitialized stack memory ...

The TIOCGICOUNT device ioctl in both mos7720.c and mos7840.c allows
unprivileged users to read uninitialized stack memory, because the
"reserved" member of the serial_icounter_struct struct declared on the
stack is not altered or zeroed before being copied back to the user.
This patch takes care of it.

Signed-off-by: Dan Rosenberg <dan.j.rosenberg@gmail.com>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2010-09-20 16:05:00 -07:00

..

aircable.c

USB: aircable: fix incorrect write-buffer length

2010-05-20 13:21:49 -07:00

ark3116.c

…

belkin_sa.c

USB: belkin_sa: implement line status handling

2010-05-20 13:21:48 -07:00

belkin_sa.h

…

bus.c

…

ch341.c

…

ChangeLog.history

…

console.c

…

cp210x.c

USB: cp210x usb driver: add USB_DEVICE for Pirelli DP-L10 mobile.

2010-09-03 17:33:40 -07:00

cyberjack.c

…

cypress_m8.c

USB: cypress_m8: use kfifo to implement write buffering

2010-05-20 13:21:49 -07:00

cypress_m8.h

…

digi_acceleport.c

tty: Fix the digi acceleport driver NULL checks

2010-08-10 13:47:41 -07:00

empeg.c

USB: empeg: reimplement using generic framework

2010-05-20 13:21:48 -07:00

ezusb_convert.pl

…

ezusb.c

…

ftdi_sio_ids.h

USB: ftdi_sio: Added custom PIDs for ChamSys products

2010-09-03 17:33:41 -07:00

ftdi_sio.c

USB: ftdi_sio: Added custom PIDs for ChamSys products

2010-09-03 17:33:41 -07:00

ftdi_sio.h

…

funsoft.c

…

garmin_gps.c

…

generic.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2010-08-28 13:55:31 -07:00

hp4x.c

…

io_16654.h

…

io_edgeport.c

…

io_edgeport.h

USB: io_edgeport: checkpatch cleanups

2010-05-20 13:21:47 -07:00

io_ionsp.h

USB: io_edgeport: checkpatch cleanups

2010-05-20 13:21:47 -07:00

io_tables.h

…

io_ti.c

USB: serial: io_ti.c: don't return 0 if writing the download record failed

2010-08-23 20:50:16 -07:00

io_ti.h

USB: io_edgeport: checkpatch cleanups

2010-05-20 13:21:47 -07:00

io_usbvend.h

USB: io_edgeport: checkpatch cleanups

2010-05-20 13:21:47 -07:00

ipaq.c

Revert "USB: Adding support for HTC Smartphones to ipaq"

2010-08-10 14:35:35 -07:00

ipw.c

…

ir-usb.c

USB: ir-usb: fix incorrect write-buffer length

2010-05-20 13:21:50 -07:00

iuu_phoenix.c

USB: iuu_phoenix: Add support for different baud rates.

2010-08-10 14:35:34 -07:00

iuu_phoenix.h

…

Kconfig

USB: add USB serial ssu100 driver

2010-08-10 14:35:44 -07:00

keyspan_pda.c

…

keyspan_usa26msg.h

…

keyspan_usa28msg.h

…

keyspan_usa49msg.h

…

keyspan_usa67msg.h

…

keyspan_usa90msg.h

…

keyspan.c

…

keyspan.h

…

kl5kusb105.c

fix typos concerning "initiali[zs]e"

2010-06-16 18:05:05 +02:00

kl5kusb105.h

USB: kl5kusb105.h: checkpatch cleanups

2010-05-20 13:21:47 -07:00

kobil_sct.c

USB: kobil: fix memory leak

2010-05-20 13:21:47 -07:00

kobil_sct.h

USB: kobil_sct.h: checkpatch cleanups

2010-05-20 13:21:47 -07:00

Makefile

USB: add USB serial ssu100 driver

2010-08-10 14:35:44 -07:00

Makefile-keyspan_pda_fw

…

mct_u232.c

…

mct_u232.h

…

mos7720.c

USB: serial/mos*: prevent reading uninitialized stack memory

2010-09-20 16:05:00 -07:00

mos7840.c

USB: serial/mos*: prevent reading uninitialized stack memory

2010-09-20 16:05:00 -07:00

moto_modem.c

…

navman.c

USB: add device IDs for igotu to navman

2010-08-23 20:50:15 -07:00

omninet.c

…

opticon.c

…

option.c

USB: option: fix incorrect novatel entries

2010-09-03 17:33:40 -07:00

oti6858.c

USB: oti6858: use port write fifo

2010-05-20 13:21:49 -07:00

oti6858.h

…

pl2303.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2010-08-28 13:55:31 -07:00

pl2303.h

USB: pl2303: New vendor and product id

2010-08-23 20:50:15 -07:00

qcaux.c

…

qcserial.c

USB: New PIDs for Qualcomm gobi 2000 (qcserial)

2010-07-26 12:00:58 -07:00

safe_serial.c

USB: safe_serial: straighten out read processing

2010-05-20 13:21:49 -07:00

siemens_mpi.c

…

sierra.c

USB: Add PID for Sierra 250U to drivers/usb/serial/sierra.c

2010-07-26 12:00:57 -07:00

spcp8x5.c

USB: spcp8x5: reimplement using generic framework

2010-05-20 13:21:48 -07:00

ssu100.c

USB: ssu100: turn off debug flag

2010-09-03 17:33:41 -07:00

symbolserial.c

…

ti_usb_3410_5052.c

USB: ti_usb: use kfifo to implement write buffering

2010-05-20 13:21:50 -07:00

ti_usb_3410_5052.h

…

usb_debug.c

USB: usb_debug: set bulk out size at probe

2010-05-20 13:21:49 -07:00

usb_wwan.c

…

usb-serial.c

USB: serial: fix leak of usb serial module refrence count

2010-08-23 20:50:15 -07:00

usb-wwan.h

…

visor.c

USB: visor: increase bulk-out buffer size

2010-05-20 13:21:48 -07:00

visor.h

USB: visor.h: checkpatch cleanups

2010-05-20 13:21:47 -07:00

vivopay-serial.c

…

whiteheat.c

…

whiteheat.h

…

zio.c

…