Paul Bolle e24cfb1b4f raw: test against runtime value of max_raw_minors ... commit 5bbb2ae3d6 upstream. bind_get() checks the device number it is called with. It uses MAX_RAW_MINORS for the upper bound. But MAX_RAW_MINORS is set at compile time while the actual number of raw devices can be set at runtime. This means the test can either be too strict or too lenient. And if the test ends up being too lenient bind_get() might try to access memory beyond what was allocated for "raw_devices". So check against the runtime value (max_raw_minors) in this function. Signed-off-by: Paul Bolle <pebolle@tiscali.nl> Acked-by: Jan Kara <jack@suse.cz> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-02-22 10:32:45 -08:00
..
agp
hw_random	virtio: rng: disallow multiple device registrations, fixes crashes	2013-03-20 13:04:57 -07:00
ipmi	ipmi: ipmi_devintf: compat_ioctl method fails to take ipmi_mutex	2013-05-19 10:54:49 -07:00
mwave
pcmcia
tpm
xilinx_hwicap
apm-emulation.c
applicom.c
applicom.h
bfin-otp.c
bsr.c
ds1302.c
ds1620.c
dsp56k.c
dtlk.c
efirtc.c
generic_nvram.c
genrtc.c
hangcheck-timer.c
hpet.c	vm: convert HPET mmap to vm_iomap_memory() helper	2013-04-25 21:19:56 -07:00
i8k.c	drivers/char/i8k.c: add Dell XPLS L421X	2013-12-11 22:34:12 -08:00
Kconfig
lp.c
Makefile
mbcs.c
mbcs.h
mem.c
misc.c
mmtimer.c
msm_smd_pkt.c
mspec.c
nsc_gpio.c
nvram.c
nwbutton.c
nwbutton.h
nwflash.c
pc8736x_gpio.c
ppdev.c
ps3flash.c
ramoops.c
random.c	random: run random_int_secret_init() run after all late_initcalls	2013-10-22 09:02:25 +01:00
raw.c	raw: test against runtime value of max_raw_minors	2014-02-22 10:32:45 -08:00
rtc.c
scx200_gpio.c
snsc.c
snsc.h
snsc_event.c
sonypi.c
tb0219.c
tile-srom.c
tlclk.c
toshiba.c
ttyprintk.c
uv_mmtimer.c
virtio_console.c	virtio: console: return -ENODEV on all read operations after unplug	2013-08-14 22:57:07 -07:00