From patchwork Thu Feb 17 17:34:52 2011 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: Hardy CVE: tty: Make tiocgicount a handler, CVE-2010-4076 Date: Thu, 17 Feb 2011 07:34:52 -0000 From: Tim Gardner X-Patchwork-Id: 83462 Message-Id: <20110217173452.DCC90F89F8@sepang.rtg.net> To: kernel-team@lists.ubuntu.com The following changes since commit ecccfa52383097f93172113f1e9dae76deeda904: Tim Gardner (1): UBUNTU: Bump ABI are available in the git repository at: git://kernel.ubuntu.com/rtg/ubuntu-hardy.git CVE-2010-4076 Tim Gardner (1): tty: Make tiocgicount a handler, CVE-2010-4076 .../openvz/patchset/0001-2.6.24-ovz002.patch | 22 +++++++----- drivers/char/tty_io.c | 18 +++++++++ drivers/serial/serial_core.c | 37 +++++++++----------- drivers/usb/serial/usb-serial.c | 13 +++++++ include/linux/tty_driver.h | 11 ++++++ include/linux/usb/serial.h | 2 + 6 files changed, 74 insertions(+), 29 deletions(-) >From 21d71f1a2ca7a69dafe6366b6116e3abac4b8433 Mon Sep 17 00:00:00 2001 From: Tim Gardner Date: Wed, 16 Feb 2011 10:39:22 -0700 Subject: [PATCH] tty: Make tiocgicount a handler, CVE-2010-4076 BugLink: http://bugs.launchpad.net/bugs/720189 CVE-2010-4076 Dan Rosenberg noted that various drivers return the struct with uncleared fields. Instead of spending forever trying to stomp all the drivers that get it wrong (and every new driver) do the job in one place. This first patch adds the needed operations and hooks them up, including the needed USB midlayer and serial core plumbing. Signed-off-by: Alan Cox Signed-off-by: Greg Kroah-Hartman (backported from commit d281da7ff6f70efca0553c288bb883e8605b3862) Signed-off-by: Tim Gardner --- .../openvz/patchset/0001-2.6.24-ovz002.patch | 22 +++++++----- drivers/char/tty_io.c | 18 +++++++++ drivers/serial/serial_core.c | 37 +++++++++----------- drivers/usb/serial/usb-serial.c | 13 +++++++ include/linux/tty_driver.h | 11 ++++++ include/linux/usb/serial.h | 2 + 6 files changed, 74 insertions(+), 29 deletions(-)