mbox

Dapper CVE: tty: Make tiocgicount a handler, CVE-2010-4076

Message ID 20110217155854.2D097F89F8@sepang.rtg.net
State Accepted
Headers show

Pull-request

git://kernel.ubuntu.com/rtg/ubuntu-dapper.git CVE-2010-4076

Message

Tim Gardner Feb. 17, 2011, 3:58 p.m. UTC 
The following changes since commit 2b4d107cba9ec532e112376537273155825999cf:
  Alan Cox (1):
        bluetooth: Fix missing NULL check, CVE-2010-4242

are available in the git repository at:

  git://kernel.ubuntu.com/rtg/ubuntu-dapper.git CVE-2010-4076

Tim Gardner (1):
      tty: Make tiocgicount a handler, CVE-2010-4076

 drivers/char/tty_io.c           |   18 ++++++++++++++++++
 drivers/serial/serial_core.c    |   37 +++++++++++++++++--------------------
 drivers/usb/serial/usb-serial.c |   13 +++++++++++++
 drivers/usb/serial/usb-serial.h |    2 ++
 include/linux/tty_driver.h      |   11 +++++++++++
 5 files changed, 61 insertions(+), 20 deletions(-)

From bd52ed455730f65da02c7170591065b13b89c3b4 Mon Sep 17 00:00:00 2001
From: Tim Gardner <tim.gardner@canonical.com>
Date: Wed, 16 Feb 2011 13:09:41 -0700
Subject: [PATCH] tty: Make tiocgicount a handler, CVE-2010-4076

BugLink: http://bugs.launchpad.net/bugs/720189

CVE-2010-4076

Dan Rosenberg noted that various drivers return the struct with uncleared
fields. Instead of spending forever trying to stomp all the drivers that
get it wrong (and every new driver) do the job in one place.

This first patch adds the needed operations and hooks them up, including
the needed USB midlayer and serial core plumbing.

Signed-off-by: Alan Cox <alan@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

(backported from commit d281da7ff6f70efca0553c288bb883e8605b3862)

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
---
 drivers/char/tty_io.c           |   18 ++++++++++++++++++
 drivers/serial/serial_core.c    |   37 +++++++++++++++++--------------------
 drivers/usb/serial/usb-serial.c |   13 +++++++++++++
 drivers/usb/serial/usb-serial.h |    2 ++
 include/linux/tty_driver.h      |   11 +++++++++++
 5 files changed, 61 insertions(+), 20 deletions(-)

Comments

Tim Gardner Feb. 22, 2011, 5:20 p.m. UTC | #1 
applied