Kees Cook
ffc8b30866
block: do not pass disk names as format strings ...
Disk names may contain arbitrary strings, so they must not be
interpreted as format strings. It seems that only md allows arbitrary
strings to be used for disk names, but this could allow for a local
memory corruption from uid 0 into ring 0.
CVE-2013-2851
Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: Jens Axboe <axboe@kernel.dk>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2013-07-03 16:07:25 -07:00
Merge branch 'for-3.10/drivers' of git://git.kernel.dk/linux-block
2013-05-08 11:51:05 -07:00
Merge branch 'for-3.10/drivers' of git://git.kernel.dk/linux-block
2013-05-08 11:51:05 -07:00
mtip32xx: Correctly handle bio->bi_idx != 0 conditions
2013-05-15 10:09:05 +02:00
block_device_operations->release() should return void
2013-05-07 02:16:21 -04:00
rsxx: remove unused variable
2013-03-26 14:48:12 -06:00
xen-blkback: don't store dev_bus_addr
2013-03-19 12:50:00 -04:00
block_device_operations->release() should return void
2013-05-07 02:16:21 -04:00
block_device_operations->release() should return void
2013-05-07 02:16:21 -04:00
drivers/block/brd.c: fix brd_lookup_page() race
2013-05-24 16:22:52 -07:00
cciss: fix broken mutex usage in ioctl
2013-06-12 16:29:45 -07:00
cciss: switch to ->show_info()
2013-04-09 14:13:19 -04:00
block_device_operations->release() should return void
2013-05-07 02:16:21 -04:00
move linux/loop.h to drivers/block
2013-06-29 12:46:45 +04:00
procfs: new helper - PDE_DATA(inode)
2013-04-09 14:13:32 -04:00
Merge branch 'for-3.10/core' of git://git.kernel.dk/linux-block
2013-05-08 10:13:35 -07:00
block: IBM RamSan 70/80 branding changes.
2013-03-11 19:53:55 +01:00
move linux/loop.h to drivers/block
2013-06-29 12:46:45 +04:00
move linux/loop.h to drivers/block
2013-06-29 12:46:45 +04:00
NVMe: Add nvme-scsi.c
2013-03-28 14:50:49 -04:00
Merge branch 'for-3.10/drivers' of git://git.kernel.dk/linux-block
2013-05-08 11:51:05 -07:00
block: do not pass disk names as format strings
2013-07-03 16:07:25 -07:00
NVMe: Add MSI support
2013-05-31 11:45:52 -04:00
NVMe: Fix a signedness bug in nvme_trans_modesel_get_mp
2013-05-17 09:10:38 -04:00
pktcdvd: silence static checker warning
2013-05-29 15:36:22 +02:00
Drivers: block: remove __dev* attributes.
2013-01-03 15:57:15 -08:00
procfs: new helper - PDE_DATA(inode)
2013-04-09 14:13:32 -04:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client
2013-06-29 10:31:15 -07:00
rbd: get rid of RBD_MAX_SEG_NAME_LEN
2012-12-17 08:37:29 -06:00
sunvdc: Fix off-by-one in generic_request().
2013-02-14 11:49:01 -08:00
block_device_operations->release() should return void
2013-05-07 02:16:21 -04:00
block_device_operations->release() should return void
2013-05-07 02:16:21 -04:00
Drivers: block: remove __dev* attributes.
2013-01-03 15:57:15 -08:00
virtio_blk: remove nents member.
2013-03-20 15:44:58 +10:30
block_device_operations->release() should return void
2013-05-07 02:16:21 -04:00
drivers/block/xsysace.c: fix id with missing port-number
2013-05-24 16:22:50 -07:00
block_device_operations->release() should return void
2013-05-07 02:16:21 -04:00
ffc8b30866