Kees Cook a8139b5b8b block: do not pass disk names as format strings ... commit ffc8b30866 upstream. Disk names may contain arbitrary strings, so they must not be interpreted as format strings. It seems that only md allows arbitrary strings to be used for disk names, but this could allow for a local memory corruption from uid 0 into ring 0. CVE-2013-2851 Signed-off-by: Kees Cook <keescook@chromium.org> Cc: Jens Axboe <axboe@kernel.dk> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2013-07-13 11:03:41 -07:00
..
partitions	LDM: Fix reassembly of extended VBLKs.	2012-02-24 09:37:42 +00:00
blk-cgroup.c	Merge branch 'for-3.4' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup	2012-03-20 18:11:21 -07:00
blk-cgroup.h
blk-core.c	block: fix request_queue->flags initialization	2012-10-21 09:27:59 -07:00
blk-exec.c	block: add missing blk_queue_dead() checks	2011-12-14 00:33:37 +01:00
blk-flush.c	blk-flush: move the queue kick into	2011-10-24 16:24:31 +02:00
blk-integrity.c	block: add export.h to files using EXPORT_SYMBOL/THIS_MODULE macros	2011-10-31 19:31:12 -04:00
blk-ioc.c	block: fix ioc leak in put_io_context	2012-03-14 15:34:48 +01:00
blk-iopoll.c
blk-lib.c
blk-map.c	block: re-use existing 'reading' variable instead of checking direction again	2011-12-21 15:27:24 +01:00
blk-merge.c	block: separate out blk_rq_merge_ok() and blk_try_merge() from elevator functions	2012-02-08 09:19:38 +01:00
blk-settings.c	block: Introduce blk_set_stacking_limits function	2012-01-11 16:27:11 +01:00
blk-softirq.c	sched, block: Unify cache detection	2012-01-27 13:28:48 +01:00
blk-sysfs.c	block: avoid using uninitialized value in from queue_var_store	2013-04-12 09:38:46 -07:00
blk-tag.c	block: fix blk_queue_end_tag()	2011-12-29 09:16:28 +01:00
blk-throttle.c	block: use lockdep_assert_held for queue locking	2012-03-30 12:33:28 +02:00
blk-timeout.c
blk.h	Merge branch 'linus' into sched/core	2012-03-01 10:26:43 +01:00
bsg-lib.c	block: Change module.h -> export.h in bsg-lib.c	2011-10-31 19:31:13 -04:00
bsg.c	bsg: fix sysfs link remove warning	2012-02-08 20:02:03 +01:00
cfq-iosched.c	block: Make cfq_target_latency tunable through sysfs.	2012-04-01 14:33:39 -07:00
cfq.h
compat_ioctl.c	block: Add BLKROTATIONAL ioctl	2012-01-11 16:29:31 +01:00
deadline-iosched.c	block, cfq: move icq cache management to block core	2011-12-14 00:33:42 +01:00
elevator.c	block: separate out blk_rq_merge_ok() and blk_try_merge() from elevator functions	2012-02-08 09:19:38 +01:00
genhd.c	block: do not pass disk names as format strings	2013-07-13 11:03:41 -07:00
ioctl.c	Merge branch 'for-3.3/core' of git://git.kernel.dk/linux-block	2012-01-15 12:24:45 -08:00
Kconfig	move fs/partitions to block/	2012-01-03 22:54:06 -05:00
Kconfig.iosched
Makefile	separate partition format handling from generic code	2012-01-03 22:54:06 -05:00
noop-iosched.c	block, cfq: move icq cache management to block core	2011-12-14 00:33:42 +01:00
partition-generic.c	block: fix ext_devt_idr handling	2013-03-04 06:06:40 +08:00
scsi_ioctl.c	scsi: Silence unnecessary warnings about ioctl to partition	2012-12-03 11:47:11 -08:00