Thomas Gleixner b5859dacd2 x86/fpu: Limit xstate copy size in xstateregs_set() ...

[ Upstream commit 07d6688b22 ]

If the count argument is larger than the xstate size, this will happily
copy beyond the end of xstate.

Fixes: 91c3dba7db ("x86/fpu/xstate: Fix PTRACE frames for XSAVES")
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: Borislav Petkov <bp@suse.de>
Reviewed-by: Andy Lutomirski <luto@kernel.org>
Reviewed-by: Borislav Petkov <bp@suse.de>
Link: https://lkml.kernel.org/r/20210623121452.120741557@linutronix.de
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-07-20 16:05:52 +02:00

..

bugs.c

…

core.c

…

init.c

…

Makefile

…

regset.c

x86/fpu: Limit xstate copy size in xstateregs_set()

2021-07-20 16:05:52 +02:00

signal.c

x86/fpu: Preserve supervisor states in sanitize_restored_user_xstate()

2021-06-30 08:47:26 -04:00

xstate.c

x86/fpu: Fix copy_xstate_to_kernel() gap handling

2021-07-20 16:05:52 +02:00