Jens Axboe 58275258ab block: check for proper length of iov entries in blk_rq_map_user_iov() ...

commit 9284bcf4e3 upstream.

Ensure that we pass down properly validated iov segments before
calling into the mapping or copy functions.

Reported-by: Dan Rosenberg <drosenberg@vsecurity.com>
Signed-off-by: Jens Axboe <jaxboe@fusionio.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2010-12-09 13:31:55 -08:00

..

blk-barrier.c

block: set up rq->rq_disk properly for flush requests

2010-08-07 18:52:41 +02:00

blk-cgroup.c

blkio: Fix return code for mkdir calls

2010-08-23 10:56:30 +02:00

blk-cgroup.h

blk-cgroup: config options re-arrangement

2010-04-26 19:27:56 +02:00

blk-core.c

BLOCK: fix bio.bi_rw handling

2010-08-23 12:33:10 +02:00

blk-exec.c

block: remove wrappers for request type/flags

2010-08-07 18:17:56 +02:00

blk-integrity.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

blk-ioc.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

blk-iopoll.c

tree-wide: fix assorted typos all over the place

2009-12-04 15:39:55 +01:00

blk-lib.c

block: add secure discard

2010-08-12 08:43:30 -07:00

blk-map.c

block: check for proper length of iov entries in blk_rq_map_user_iov()

2010-12-09 13:31:55 -08:00

blk-merge.c

block: prevent merges of discard and write requests

2010-09-25 12:42:55 +02:00

blk-settings.c

block: Ensure physical block size is unsigned int

2010-12-09 13:31:54 -08:00

blk-softirq.c

generic-ipi: remove CSD_FLAG_WAIT

2009-02-25 14:13:44 +01:00

blk-sysfs.c

block: put dev->kobj in blk_register_queue fail path

2010-08-23 12:30:29 +02:00

blk-tag.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

blk-timeout.c

block: ensure jiffies wrap is handled correctly in blk_rq_timed_out_timer

2010-04-21 17:42:08 +02:00

blk.h

block: Range check cpu in blk_cpu_to_group

2010-09-10 09:03:21 +02:00

bsg.c

[SCSI] bsg: fix incorrect device_status value

2010-10-15 10:18:48 -04:00

cfq-iosched.c

cfq-iosched: fix a kernel OOPs when usb key is inserted

2010-09-21 11:49:17 +02:00

cfq.h

cfq: fix recursive call in cfq_blkiocg_update_completion_stats()

2010-06-21 09:10:55 +02:00

compat_ioctl.c

block: add secure discard

2010-08-12 08:43:30 -07:00

deadline-iosched.c

block: convert to pos and nr_sectors accessors

2009-05-11 09:50:54 +02:00

elevator.c

elevator: fix oops on early call to elevator_change()

2010-10-07 09:35:16 +02:00

genhd.c

block: Fix race during disk initialization

2010-12-09 13:31:54 -08:00

ioctl.c

block: add secure discard

2010-08-12 08:43:30 -07:00

Kconfig

blk-cgroup: config options re-arrangement

2010-04-26 19:27:56 +02:00

Kconfig.iosched

blk-cgroup: config options re-arrangement

2010-04-26 19:27:56 +02:00

Makefile

blkdev: move blkdev_issue helper functions to separate file

2010-04-28 19:47:36 +02:00

noop-iosched.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

scsi_ioctl.c

block: take care not to overflow when calculating total iov length

2010-12-09 13:31:55 -08:00