linux-stable/include
David Woodhouse c255cda2af [PATCH] 32bit sendmsg() flaw (CAN-2005-2490)
When we copy 32bit ->msg_control contents to kernel, we walk the same
userland data twice without sanity checks on the second pass.

Second version of this patch: the original broke with 64-bit arches
running 32-bit-compat-mode executables doing sendmsg() syscalls with
unaligned CMSG data areas

Another thing is that we use kmalloc() to allocate and sock_kfree_s()
to free afterwards; less serious, but also needs fixing.

Patch by Al Viro, David Miller, David Woodhouse
(sparc64 clean compile fix from David Miller)

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
Signed-off-by: Chris Wright <chrisw@osdl.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2005-09-09 19:42:53 -07:00
..
acpi /home/lenb/src/to-linus branch 'acpi-2.6.12' 2005-07-29 23:31:17 -04:00
asm-alpha [PATCH] alpha xchg fix 2005-08-23 18:43:44 -07:00
asm-arm [PATCH] Fix IXP4xx CLOCK_TICK_RATE 2005-08-23 20:06:33 -07:00
asm-arm26 [PATCH] Add emergency_restart() 2005-07-26 14:35:41 -07:00
asm-cris [PATCH] CRIS update: new subarchitecture v32 2005-07-27 16:26:01 -07:00
asm-frv [PATCH] Add emergency_restart() 2005-07-26 14:35:41 -07:00
asm-generic [PATCH] pci and yenta: pcibios_bus_to_resource 2005-08-04 21:32:46 -07:00
asm-h8300 [PATCH] Add emergency_restart() 2005-07-26 14:35:41 -07:00
asm-i386 [PATCH] i386 / desc_empty macro is incorrect 2005-08-16 12:18:01 -07:00
asm-ia64 [IA64] remove unused function __ia64_get_io_port_base 2005-08-18 14:40:00 -07:00
asm-m32r [PATCH] m32r smp.h gcc4 fixes 2005-08-23 18:43:44 -07:00
asm-m68k [PATCH] m68k: fix broken macros causing compile errors 2005-08-24 09:37:40 -07:00
asm-m68knommu [PATCH] Add emergency_restart() 2005-07-26 14:35:41 -07:00
asm-mips [PATCH] Add emergency_restart() 2005-07-26 14:35:41 -07:00
asm-parisc [PATCH] pci and yenta: pcibios_bus_to_resource 2005-08-04 21:32:46 -07:00
asm-ppc [PATCH] qualifiers in return types - easy cases 2005-08-23 18:43:45 -07:00
asm-ppc64 [PATCH] ppc64: Fix issue with gcc 4.0 compiled kernels 2005-08-26 19:37:11 -07:00
asm-s390 [PATCH] s390 __CHECKER__ ifdefs 2005-08-23 18:43:46 -07:00
asm-sh [PATCH] SH: inotify and ioprio syscalls 2005-08-18 12:53:57 -07:00
asm-sh64 [PATCH] SH64: inotify and ioprio syscalls 2005-08-18 12:53:57 -07:00
asm-sparc [SPARC]: Add inotify syscall entries. 2005-07-27 14:14:39 -07:00
asm-sparc64 [SPARC64]: Move kernel unaligned trap handlers into assembler file. 2005-08-19 15:55:33 -07:00
asm-um um: fix __pa/__va macro expansion problem 2005-08-15 17:40:46 -07:00
asm-v850 [PATCH] v850: Define L1_CACHE_SHIFT and L1_CACHE_SHIFT_MAX 2005-07-27 16:26:03 -07:00
asm-x86_64 [PATCH] x86_64: Tell VM about holes in nodes 2005-08-26 19:37:12 -07:00
asm-xtensa [PATCH] Add emergency_restart() 2005-07-26 14:35:41 -07:00
linux Fix nasty ncpfs symlink handling bug. 2005-08-19 18:02:56 -07:00
math-emu Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
media [PATCH] V4L: Miscellaneous fixes 2005-08-01 19:13:59 -07:00
mtd [MTD] NAND: Honour autoplacement schemes supplied by the caller 2005-05-23 13:20:45 +02:00
net [PATCH] 32bit sendmsg() flaw (CAN-2005-2490) 2005-09-09 19:42:53 -07:00
pcmcia [PATCH] pcmcia: fix pcmcia-cs compilation 2005-07-12 16:00:59 -07:00
rxrpc Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
scsi [SCSI] fix target scanning oops with fc transport class 2005-08-08 17:14:55 -05:00
sound [PATCH] Kconfig fix (ISA_DMA_API and sound/*) 2005-08-23 18:43:40 -07:00
video [PATCH] Clean-up and bug fix for tdfxfb framebuffer size detection 2005-05-01 08:59:25 -07:00