diff options
| author | Adam Borowski <kilobyte@angband.pl> | 2017-06-03 09:35:06 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-06-09 11:07:36 +0200 |
| commit | 6987dc8a70976561d22450b5858fc9767788cc1c (patch) | |
| tree | 83afa7420dbee39116d3953d5ea260cb76443861 /crypto | |
| parent | vt: use copy_from/to_user instead of __get/put_user for scrnmap ioctls (diff) | |
| download | linux-6987dc8a70976561d22450b5858fc9767788cc1c.tar.xz linux-6987dc8a70976561d22450b5858fc9767788cc1c.zip | |
vt: fix unchecked __put_user() in tioclinux ioctls
Only read access is checked before this call.
Actually, at the moment this is not an issue, as every in-tree arch does
the same manual checks for VERIFY_READ vs VERIFY_WRITE, relying on the MMU
to tell them apart, but this wasn't the case in the past and may happen
again on some odd arch in the future.
If anyone cares about 3.7 and earlier, this is a security hole (untested)
on real 80386 CPUs.
Signed-off-by: Adam Borowski <kilobyte@angband.pl>
CC: stable@vger.kernel.org # v3.7-
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'crypto')
0 files changed, 0 insertions, 0 deletions