linux-stable-mirror

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-03-18 11:40:17 +01:00

Files

Yihui ZENG b8e51a6a9d s390/cmm: fix information leak in cmm_timeout_handler()

The problem is that we were putting the NUL terminator too far:

	buf[sizeof(buf) - 1] = '\0';

If the user input isn't NUL terminated and they haven't initialized the
whole buffer then it leads to an info leak.  The NUL terminator should
be:

	buf[len - 1] = '\0';

Signed-off-by: Yihui Zeng <yzeng56@asu.edu>
Cc: stable@vger.kernel.org
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
[heiko.carstens@de.ibm.com: keep semantics of how *lenp and *ppos are handled]
Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
Signed-off-by: Vasily Gorbik <gor@linux.ibm.com>

2019-10-31 17:26:48 +01:00

cmm.c

s390/cmm: fix information leak in cmm_timeout_handler()

2019-10-31 17:26:48 +01:00

dump_pagetables.c

s390/mm: fix dump_pagetables top level page table walking

2019-08-06 13:58:34 +02:00

extmem.c

s390/extmem: use refcount_t for refcount

2019-08-21 12:41:43 +02:00

fault.c

s390/mm: add fallthrough annotations