| Submitter | Tim Gardner |
|---|---|
| Date | Feb. 17, 2011, 3:58 p.m. |
| Message ID | <20110217155854.2D097F89F8@sepang.rtg.net> |
| Download | mbox |
| Permalink | /patch/83457/ |
| State | Accepted |
| Headers | show |
Pull-request
git://kernel.ubuntu.com/rtg/ubuntu-dapper.git CVE-2010-4076Comments
applied
The following changes since commit 2b4d107cba9ec532e112376537273155825999cf: Alan Cox (1): bluetooth: Fix missing NULL check, CVE-2010-4242 are available in the git repository at: git://kernel.ubuntu.com/rtg/ubuntu-dapper.git CVE-2010-4076 Tim Gardner (1): tty: Make tiocgicount a handler, CVE-2010-4076 drivers/char/tty_io.c | 18 ++++++++++++++++++ drivers/serial/serial_core.c | 37 +++++++++++++++++-------------------- drivers/usb/serial/usb-serial.c | 13 +++++++++++++ drivers/usb/serial/usb-serial.h | 2 ++ include/linux/tty_driver.h | 11 +++++++++++ 5 files changed, 61 insertions(+), 20 deletions(-) From bd52ed455730f65da02c7170591065b13b89c3b4 Mon Sep 17 00:00:00 2001 From: Tim Gardner <tim.gardner@canonical.com> Date: Wed, 16 Feb 2011 13:09:41 -0700 Subject: [PATCH] tty: Make tiocgicount a handler, CVE-2010-4076 BugLink: http://bugs.launchpad.net/bugs/720189 CVE-2010-4076 Dan Rosenberg noted that various drivers return the struct with uncleared fields. Instead of spending forever trying to stomp all the drivers that get it wrong (and every new driver) do the job in one place. This first patch adds the needed operations and hooks them up, including the needed USB midlayer and serial core plumbing. Signed-off-by: Alan Cox <alan@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> (backported from commit d281da7ff6f70efca0553c288bb883e8605b3862) Signed-off-by: Tim Gardner <tim.gardner@canonical.com> --- drivers/char/tty_io.c | 18 ++++++++++++++++++ drivers/serial/serial_core.c | 37 +++++++++++++++++-------------------- drivers/usb/serial/usb-serial.c | 13 +++++++++++++ drivers/usb/serial/usb-serial.h | 2 ++ include/linux/tty_driver.h | 11 +++++++++++ 5 files changed, 61 insertions(+), 20 deletions(-)