android_kernel_samsung_msm8976/drivers
Matt Mackall 5a021e9ffd random: fix bound check ordering (CVE-2007-3105)
If root raised the default wakeup threshold over the size of the
output pool, the pool transfer function could overflow the stack with
RNG bytes, causing a DoS or potential privilege escalation.

(Bug reported by the PaX Team <pageexec@freemail.hu>)

Cc: Theodore Tso <tytso@mit.edu>
Cc: Willy Tarreau <w@1wt.eu>
Signed-off-by: Matt Mackall <mpm@selenic.com>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-07-19 14:21:04 -07:00
..
acorn
acpi PM: Introduce pm_power_off_prepare 2007-07-19 10:04:42 -07:00
amba
ata [libata] sata_mv: use pci_try_set_mwi() 2007-07-17 16:18:00 -04:00
atm [ATM]: nicstar needs virt_to_bus 2007-07-18 02:13:42 -07:00
auxdisplay Use menuconfig objects II - auxdisplay 2007-07-16 09:05:40 -07:00
base PM: Do not require dev spew to get PM_DEBUG 2007-07-19 10:04:42 -07:00
block lguest: the block driver 2007-07-19 10:04:53 -07:00
bluetooth
cdrom
char random: fix bound check ordering (CVE-2007-3105) 2007-07-19 14:21:04 -07:00
clocksource
connector Use menuconfig objects: connector 2007-07-16 09:05:40 -07:00
cpufreq
crypto Use menuconfig objects: crypto hw 2007-07-16 09:05:40 -07:00
dio
dma dma-mapping: prevent dma dependent code from linking on !HAS_DMA archs 2007-07-16 09:05:45 -07:00
edac drivers/edac: fix edac_device sysfs corner case bug 2007-07-19 10:04:57 -07:00
eisa
fc4
firewire firewire: fw-sbp2: convert to new SCSI data buffer accessors 2007-07-18 23:53:28 +02:00
firmware edd: switch to pci_get based API 2007-07-16 09:05:42 -07:00
hid
hwmon SPI: add 3wire mode flag 2007-07-17 10:23:04 -07:00
i2c OMAP: add TI TWL92330/Menelaus Power Management chip driver 2007-07-17 10:23:15 -07:00
ide IDE: fix termination of non-fs requests 2007-07-19 10:22:44 -07:00
ieee1394 Freezer: make kernel threads nonfreezable by default 2007-07-17 10:23:02 -07:00
infiniband some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
input some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
isdn isdn/sc: compile breakage re check_reset() 2007-07-19 10:04:50 -07:00
kvm KVM: Use CPU_DYING for disabling virtualization 2007-07-16 12:05:51 +03:00
leds
lguest lguest: the Makefile and Kconfig 2007-07-19 10:04:52 -07:00
macintosh some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
mca
md some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
media some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
message i2o debug output cleanup 2007-07-17 10:23:06 -07:00
mfd some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
misc some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
mmc some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
mtd UBI: fix compile warning 2007-07-18 16:59:17 +03:00
net Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2007-07-19 10:23:21 -07:00
nubus some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
oprofile
parisc serial: add early_serial_setup() back to header file 2007-07-18 08:38:22 -07:00
parport some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
pci some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
pcmcia PM: remove deprecated dpm_runtime_* routines 2007-07-18 15:49:49 -07:00
pnp some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
power
ps3
rapidio some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
rtc RTC: add periodic irq support to rtc-cmos 2007-07-19 10:04:52 -07:00
s390 some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
sbus some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
scsi some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
serial some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
sh some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
sn some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
spi use mutex instead of semaphore in SPI core/init code 2007-07-17 10:23:05 -07:00
tc zs: move to the serial subsystem 2007-07-18 08:38:22 -07:00
telephony some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
uio UIO: Hilscher CIF card driver 2007-07-18 15:57:16 -07:00
usb some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
video some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
w1 some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
xen xen: add the Xenbus sysfs and virtual device hotplug driver 2007-07-18 08:47:45 -07:00
zorro
Kconfig lguest: the Makefile and Kconfig 2007-07-19 10:04:52 -07:00
Makefile lguest: the Makefile and Kconfig 2007-07-19 10:04:52 -07:00