Dan Rosenberg d912e785e2 drivers/video/via/ioctl.c: prevent reading uninitialized stack memory ...

commit b4aaa78f4c upstream.

The VIAFB_GET_INFO device ioctl allows unprivileged users to read 246
bytes of uninitialized stack memory, because the "reserved" member of
the viafb_ioctl_info struct declared on the stack is not altered or
zeroed before being copied back to the user.  This patch takes care of
it.

Signed-off-by: Dan Rosenberg <dan.j.rosenberg@gmail.com>
Signed-off-by: Florian Tobias Schandinat <FlorianSchandinat@gmx.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2010-09-26 17:21:31 -07:00

..

accessibility

…

acpi

ACPI: Fix regression where _PPC is not read at boot even when ignore_ppc=0

2010-08-13 13:20:17 -07:00

amba

Merge branches 'arm', 'at91', 'bcmring', 'ep93xx', 'mach-types', 'misc' and 'w90x900' into devel

2009-09-12 12:01:34 +01:00

ata

libata: skip EH autopsy and recovery during suspend

2010-09-20 13:17:51 -07:00

atm

solos-pci: Fix race condition in tasklet RX handling

2010-08-13 13:19:34 -07:00

auxdisplay

…

base

firmware_class: fix memory leak - free allocated pages

2010-08-02 10:21:25 -07:00

block

loop: Update mtime when writing using aops

2010-08-13 13:20:23 -07:00

bluetooth

Bluetooth: Added support for controller shipped with iMac i5

2010-08-13 13:19:47 -07:00

cdrom

sysctl: remove "struct file *" argument of ->proc_handler

2009-09-24 07:21:04 -07:00

char

char: Mark /dev/zero and /dev/kmem as not capable of writeback

2010-09-26 17:21:26 -07:00

clocksource

clocksource: sh_cmt: compute mult and shift before registration

2010-07-05 11:11:02 -07:00

connector

connector: Delete buggy notification code.

2010-02-09 04:50:59 -08:00

cpufreq

revert "[CPUFREQ] remove rwsem lock from CPUFREQ_GOV_STOP call (second call site)"

2010-08-02 10:21:25 -07:00

cpuidle

cpuidle: Fix incorrect optimization

2010-05-12 14:57:16 -07:00

crypto

crypto: padlock-sha - Add import/export support

2010-02-23 07:37:54 -08:00

dca

dca: module load should not be an error message

2009-09-13 10:27:04 -07:00

dio

…

dma

ioat: fix infinite timeout checking in ioat2_quiesce

2010-02-23 07:37:49 -08:00

edac

amd64_edac: Correct scrub rate setting

2010-08-10 10:20:38 -07:00

eisa

…

firewire

firewire: core: check for 1394a compliant IRM, fix inaccessibility of Sony camcorder

2010-07-05 11:11:04 -07:00

firmware

DMI: allow omitting ident strings in DMI tables

2010-01-28 15:01:52 -08:00

gpio

gpiolib: Actually set output state in wm831x_gpio_direction_output()

2010-03-15 08:49:57 -07:00

gpu

drm: Only decouple the old_fb from the crtc is we call mode_set*

2010-09-20 13:18:14 -07:00

hid

HID: fix suspend crash by moving initializations earlier

2010-09-20 13:17:51 -07:00

hwmon

hwmon: (f75375s) Do not overwrite values read from registers

2010-09-20 13:18:13 -07:00

i2c

i2c: Fix probing of FSC hardware monitoring chips

2010-05-12 14:57:04 -07:00

ide

ide-cd: Do not access completed requests in the irq handler

2010-08-13 13:19:36 -07:00

idle

ioat: switch watchdog and reset handler from workqueue to timer

2009-09-08 17:30:24 -07:00

ieee1394

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

ieee802154

ieee802154: dont leak skbs in ieee802154_fake_xmit()

2009-11-19 13:16:21 -08:00

infiniband

IPoIB: Fix world-writable child interface control sysfs attributes

2010-08-02 10:20:54 -07:00

input

Input: i8042 - fix device removal on unload

2010-09-20 13:17:54 -07:00

isdn

isdn: fix information leak

2010-08-26 16:41:51 -07:00

leds

leds-gpio: fix default state handling on OF platforms

2010-04-01 15:58:53 -07:00

lguest

lguest: fix bug in setting guest GDT entry

2010-01-06 15:05:19 -08:00

macintosh

macintosh/therm_adt746x: Fix sysfs attributes lifetime

2010-03-15 08:49:46 -07:00

mca

…

md

dm ioctl: release _hash_lock between devices in remove_all

2010-08-26 16:41:44 -07:00

media

V4L/DVB (13830): uvcvideo: add another YUYV format GUID for iSight cameras

2010-08-02 10:21:30 -07:00

memstick

memstick: fix hangs on unexpected device removal in mspro_blk

2010-08-26 16:41:32 -07:00

message

SCSI: mptsas: fix hangs caused by ATA pass-through

2010-09-26 17:21:28 -07:00

mfd

mfd: WM835x GPIO direction register is not locked

2010-01-22 15:18:18 -08:00

misc

SCSI: enclosure: fix error path - actually return ERR_PTR() on error

2010-08-10 10:20:44 -07:00

mmc

mmc: fix the use of kunmap_atomic() in tmio_mmc.h

2010-09-20 13:17:53 -07:00

mtd

pxa3xx: fix ns2cycle equation

2010-08-26 16:41:42 -07:00

net

bonding: correctly process non-linear skbs

2010-09-26 17:21:24 -07:00

nubus

…

of

of: Remove nested function

2009-10-15 09:58:27 -06:00

oprofile

oprofile: fix crash when accessing freed task structs

2010-09-20 13:17:50 -07:00

parisc

PARISC: led.c - fix potential stack overflow in led_proc_write()

2010-08-10 10:20:37 -07:00

parport

sysctl: remove "struct file *" argument of ->proc_handler

2009-09-24 07:21:04 -07:00

pci

drivers/pci/intel-iommu.c: fix build with older gcc's

2010-09-26 17:21:26 -07:00

pcmcia

pcmcia: avoid buffer overflow in pcmcia_setup_isa_irq

2010-08-26 16:41:53 -07:00

platform

eeepc-laptop: check wireless hotplug events

2010-08-02 10:21:29 -07:00

pnp

ACPI: remove acpi_device.flags.hardware_id

2009-09-25 15:09:48 -04:00

power

apm_power: Add missing break statement

2010-09-20 13:18:13 -07:00

pps

pps: events reporting fix up

2009-11-12 07:26:01 -08:00

ps3

powerpc/ps3: Workaround for flash memory I/O error

2009-09-11 11:28:00 +10:00

rapidio

…

regulator

regulator: Fix display of null constraints for regulators

2010-02-23 07:37:49 -08:00

rtc

rtc: fix ds1388 time corruption

2010-08-02 10:20:53 -07:00

s390

nohz: Introduce arch_needs_cpu

2010-08-13 13:20:13 -07:00

sbus

const: make block_device_operations const

2009-09-22 07:17:25 -07:00

scsi

ibmvfc: Reduce error recovery timeout

2010-08-13 13:20:24 -07:00

serial

serial: cpm_uart: implement the cpm_uart_early_write() function for console poll

2010-08-02 10:20:52 -07:00

sfi

SFI: remove __init from sfi_verify_table

2009-10-03 01:16:12 -04:00

sh

sh: Fix up simplified multi-evt handling under sparseirq.

2009-08-31 15:15:33 +09:00

sn

…

spi

SPI: spi_txx9: Fix bit rate calculation

2009-12-02 23:58:32 +00:00

ssb

ssb: Handle alternate SSPROM location

2010-08-10 10:20:51 -07:00

staging

Staging: vt6655: fix buffer overflow

2010-09-26 17:21:24 -07:00

tc

…

telephony

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

thermal

acpi: thermal: Add EOL to the trip_point_N_type strings

2009-11-05 17:33:24 -05:00

uio

uio: pm_runtime_disable is needed if failed

2009-11-13 11:36:00 +09:00

usb

USB: serial/mos*: prevent reading uninitialized stack memory

2010-09-26 17:21:14 -07:00

uwb

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

video

drivers/video/via/ioctl.c: prevent reading uninitialized stack memory

2010-09-26 17:21:31 -07:00

virtio

virtio-pci: disable msi at startup

2010-08-02 10:20:42 -07:00

vlynq

drivers/vlynq/vlynq.c: fix resource size off by 1 error

2009-09-24 07:21:05 -07:00

w1

w1: w1 temp: fix negative termperature calculation

2010-05-12 14:57:00 -07:00

watchdog

WATCHDOG: iTCO_wdt: TCO Watchdog patch for additional Intel Cougar Point DeviceIDs

2010-04-26 07:41:18 -07:00

xen

xen: use percpu interrupts for IPIs and VIRQs

2010-09-20 13:17:43 -07:00

zorro

…

Kconfig

…

Makefile

virtio: initialize earlier

2010-05-12 14:57:15 -07:00