linux, branch v2.6.30.6Linux kernel source treehttps://git.amat.us/linux/atom/?h=v2.6.30.62009-09-09T03:39:34ZLinux 2.6.30.62009-09-09T03:39:34ZGreg Kroah-Hartmangregkh@suse.de2009-09-09T03:39:34Zurn:sha1:3c80dd9904552b4c98de228b731b3e3c48f6badaocfs2: ocfs2_write_begin_nolock() should handle len=02009-09-09T03:34:12ZSunil Mushransunil.mushran@oracle.com2009-09-04T18:12:01Zurn:sha1:e38d22518cad8f3e1805bf17482b8bd2a5ec7de0
commit 8379e7c46cc48f51197dd663fc6676f47f2a1e71 upstream.
Bug introduced by mainline commit e7432675f8ca868a4af365759a8d4c3779a3d922
The bug causes ocfs2_write_begin_nolock() to oops when len=0.
Signed-off-by: Sunil Mushran <sunil.mushran@oracle.com>
Signed-off-by: Joel Becker <joel.becker@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
NET: llc, zero sockaddr_llc struct2009-09-09T03:34:11ZJiri Slabyjirislaby@gmail.com2009-08-24T05:55:51Zurn:sha1:94a92d5f9ece6fb4bb9e23114413c5f1dcf305ef
commit 28e9fc592cb8c7a43e4d3147b38be6032a0e81bc upstream.
sllc_arphrd member of sockaddr_llc might not be changed. Zero sllc
before copying to the above layer's structure.
Signed-off-by: Jiri Slaby <jirislaby@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
rose: Fix rose_getname() leak2009-09-09T03:34:10ZEric Dumazeteric.dumazet@gmail.com2009-08-06T03:34:06Zurn:sha1:6966703e42de2262a11cbada59645820045ea186
commit 17ac2e9c58b69a1e25460a568eae1b0dc0188c25 upstream.
rose_getname() can leak kernel memory to user.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
econet: Fix econet_getname() leak2009-09-09T03:34:10ZEric Dumazeteric.dumazet@gmail.com2009-08-06T03:48:36Zurn:sha1:88b694de0b4789b4cd9efc2321366c75059baa6b
commit 80922bbb12a105f858a8f0abb879cb4302d0ecaa upstream.
econet_getname() can leak kernel memory to user.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
netrom: Fix nr_getname() leak2009-09-09T03:34:09ZEric Dumazeteric.dumazet@gmail.com2009-08-06T03:31:07Zurn:sha1:0535beef12f0d415e334516b981b2994b76b78cf
commit f6b97b29513950bfbf621a83d85b6f86b39ec8db upstream.
nr_getname() can leak kernel memory to user.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
appletalk: fix atalk_getname() leak2009-09-09T03:34:08ZEric Dumazeteric.dumazet@gmail.com2009-08-06T02:27:43Zurn:sha1:e9ddac8017a55bd2ab3ba5611403dcfcbf29e7be
commit 3d392475c873c10c10d6d96b94d092a34ebd4791 upstream.
atalk_getname() can leak 8 bytes of kernel memory to user
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
irda: Fix irda_getname() leak2009-09-09T03:34:07ZEric Dumazeteric.dumazet@gmail.com2009-08-06T03:55:04Zurn:sha1:03300f07d8e955ef16b7bfcd62c77cb8cf5aab6a
commit 09384dfc76e526c3993c09c42e016372dc9dd22c upstream.
irda_getname() can leak kernel memory to user.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
can: Fix raw_getname() leak2009-09-09T03:34:07ZEric Dumazeteric.dumazet@gmail.com2009-08-06T20:27:04Zurn:sha1:3020cf2a8341ebe53d689826fb569f309286e654
commit e84b90ae5eb3c112d1f208964df1d8156a538289 upstream.
raw_getname() can leak 10 bytes of kernel memory to user
(two bytes hole between can_family and can_ifindex,
8 bytes at the end of sockaddr_can structure)
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Acked-by: Oliver Hartkopp <oliver@hartkopp.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
xenfb: connect to backend before registering fb2009-09-09T03:34:06ZMichal Schmidtmschmidt@redhat.com2009-08-27T19:22:43Zurn:sha1:27a473ee7017dabac9073d0c57db72bd680409a8
commit 0a80fb10239b04c45e5e80aad8d4b2ca5ac407b2 upstream.
As soon as the framebuffer is registered, our methods may be called by the
kernel. This leads to a crash as xenfb_refresh() gets called before we have
the irq.
Connect to the backend before registering our framebuffer with the kernel.
[ Fixes bug http://bugzilla.kernel.org/show_bug.cgi?id=14059 ]
Signed-off-by: Michal Schmidt <mschmidt@redhat.com>
Signed-off-by: Jeremy Fitzhardinge <jeremy.fitzhardinge@citrix.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>