From patchwork Fri Mar 9 16:26:47 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bartlomiej Zolnierkiewicz X-Patchwork-Id: 10271129 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 1425660236 for ; Fri, 9 Mar 2018 16:26:57 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 135DF29E27 for ; Fri, 9 Mar 2018 16:26:57 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 07BF629E2C; Fri, 9 Mar 2018 16:26:57 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-6.8 required=2.0 tests=BAYES_00,DKIM_SIGNED, RCVD_IN_DNSWL_HI,T_DKIM_INVALID autolearn=ham version=3.3.1 Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id B869C29E2B for ; Fri, 9 Mar 2018 16:26:55 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751147AbeCIQ0y (ORCPT ); Fri, 9 Mar 2018 11:26:54 -0500 Received: from mailout1.samsung.com ([203.254.224.24]:31663 "EHLO mailout1.samsung.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751122AbeCIQ0x (ORCPT ); Fri, 9 Mar 2018 11:26:53 -0500 Received: from epcas1p3.samsung.com (unknown [182.195.41.47]) by mailout1.samsung.com (KnoxPortal) with ESMTP id 20180309162651epoutp01d82dcef087da71a3ae2f701c9d4913b6~aTUu8dt4N2087220872epoutp01Y; Fri, 9 Mar 2018 16:26:51 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 mailout1.samsung.com 20180309162651epoutp01d82dcef087da71a3ae2f701c9d4913b6~aTUu8dt4N2087220872epoutp01Y DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=samsung.com; s=mail20170921; t=1520612811; bh=XOcRAjTb/QX59+29VBClLBpb8vWDiOH09x03r4RZ9DQ=; h=From:To:Cc:Subject:Date:References:From; b=tY7czVbyz5uSmGitTTzVgTxl3Pqt1zLjKCyFTvTZDyxAP2+jjj73Xrff1xJxf7tLx I+pqyYQlOZ/U0JIHdk7o9FeGPQsNcynads7TExFrkdicflho0RKW4St4i/oaxiajHb hIqaTEooVIK1VOBEy/C8/k53DvP7JBePvCU/jm/A= Received: from epsmges1p1.samsung.com (unknown [182.195.42.53]) by epcas1p4.samsung.com (KnoxPortal) with ESMTP id 20180309162651epcas1p49936e6c9bb857c0bc8680ba905dc8346~aTUuqsYDN1951519515epcas1p4q; Fri, 9 Mar 2018 16:26:51 +0000 (GMT) Received: from epcas1p4.samsung.com ( [182.195.41.48]) by epsmges1p1.samsung.com (Symantec Messaging Gateway) with SMTP id 1A.1A.04145.BC5B2AA5; Sat, 10 Mar 2018 01:26:51 +0900 (KST) Received: from epsmgms2p1new.samsung.com (unknown [182.195.42.142]) by epcas1p1.samsung.com (KnoxPortal) with ESMTP id 20180309162650epcas1p117f2feb3b030f08733884288a17cf933~aTUuDHM3T1431114311epcas1p1b; Fri, 9 Mar 2018 16:26:50 +0000 (GMT) X-AuditID: b6c32a35-891ff70000001031-c0-5aa2b5cb6bca Received: from epmmp1.local.host ( [203.254.227.16]) by epsmgms2p1new.samsung.com (Symantec Messaging Gateway) with SMTP id 43.15.03826.AC5B2AA5; Sat, 10 Mar 2018 01:26:50 +0900 (KST) Received: from amdc3058.localnet ([106.120.53.102]) by mmp1.samsung.com (Oracle Communications Messaging Server 7.0.5.31.0 64bit (built May 5 2014)) with ESMTPA id <0P5C00LKP0CN3G00@mmp1.samsung.com>; Sat, 10 Mar 2018 01:26:50 +0900 (KST) From: Bartlomiej Zolnierkiewicz To: Linus Torvalds Cc: linux-fbdev@vger.kernel.org, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org Subject: [GIT PULL] fbdev fix for v4.16-rc5 Date: Fri, 09 Mar 2018 17:26:47 +0100 Message-id: <5453854.qdYKEQ567K@amdc3058> User-Agent: KMail/4.13.3 (Linux/3.13.0-96-generic; KDE/4.13.3; x86_64; ; ) MIME-version: 1.0 Content-transfer-encoding: 7Bit Content-type: text/plain; charset="us-ascii" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrCIsWRmVeSWpSXmKPExsWy7bCmge7prYuiDF4vk7O48vU9m8WJvg+s Fpd3zWGzeNT3lt2BxePEjN8sHve7jzN5fN4kF8AcxWWTkpqTWZZapG+XwJXRsvAsW8Ff/ooP TS9YGhin8XYxcnJICJhITN2ykb2LkYtDSGAHo8ShpS9YQBJCAt+BnMU2MEUnfjewQRTtZpR4 +OoZM4TzlVFi48UHjCBVbAJWEhPbV4HZIgJGEp9fXGEFsZkFEiS+3PzMDGILC2hL7Jn3Hsxm EVCVON91HszmFdCUWDvtP1i9qICXxJZ97UwQcUGJH5PvsUDMkZfYt38q1EwdibPH1jGCHCEh 8JdV4vStW0CDOIAcF4k9e4shrhaWeHV8CztEWFri0lFbiPJmRolvO/YwQ9RMYJTYs14IwraW OHz8ItR8Pol3X3tYIXp5JTraoEo8JK4unArV6ihx8dp5dkhgxUo82LqGcQKjzCwkV89CcvUs JFcvYGRexSiWWlCcm55abFhgqFecmFtcmpeul5yfu4kRHNdapjsYp5zzOcQowMGoxMMrMGNR lBBrYllxZe4hRgkOZiUR3vc1QCHelMTKqtSi/Pii0pzU4kOM0hwsSuK8AQEuUUIC6Yklqdmp qQWpRTBZJg5OqQbGcr6PE5faBbxL2ixTu1c2xvWJ83Hty2oTw34+9bt5f4vrxInnnn09oDlb d5rrI9mFz41eGKksVDblWiPv0e34ipHnecfziIpU+df/X56bvGaSyHTROUw6Z4+ubPBeV37z 0dmoasbUjGf9nCv7pm36571f9fmVktwlYX+fSzzeVeL695tH3rrDDEosxRmJhlrMRcWJAKvN cmbnAgAA X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrMLMWRmVeSWpSXmKPExsVy+t9jAd1TWxdFGZzsNrO48vU9m8WJvg+s Fpd3zWGzeNT3lt2BxePEjN8sHve7jzN5fN4kF8AcxWWTkpqTWZZapG+XwJXRsvAsW8Ff/ooP TS9YGhin8XYxcnJICJhInPjdwNbFyMUhJLCTUeL0rWtQzldGicPP1zCBVLEJWElMbF/FCGKL CBhJfH5xhRXEZhZIkNh0fyobiC0soC2xZ957ZhCbRUBV4nzXeTCbV0BTYu20/2D1ogJeElv2 tTNBxAUlfky+xwIxR15i3/6pUDO1JNbvPM40gZF3FpKyWUjKZiEpW8DIvIpRMrWgODc9t9io wDAvtVyvODG3uDQvXS85P3cTIzDoth3W6tvBeH9J/CFGAQ5GJR5egRmLooRYE8uKK3MPMUpw MCuJ8L6vAQrxpiRWVqUW5ccXleakFh9ilOZgURLnvZ13LFJIID2xJDU7NbUgtQgmy8TBKdXA 6GT78vJUhZ72qbmNC3YUnzox5THf7u6lF7cXHWRzzn5kZ+b/wNdH6aHC49fP2BclnwtW+DZn /uRz173ndSzrOTjhkYzm2WOOu1MaE59P7Luz4N2ufa/uztm17KH24ifTz4h9Nv12vlKS54/g Nf9chZa4fzKJXkLTWPNuCD1m51yoUvdqq7SDzBYlluKMREMt5qLiRAAQAWa2NgIAAA== X-CMS-MailID: 20180309162650epcas1p117f2feb3b030f08733884288a17cf933 X-Msg-Generator: CA CMS-TYPE: 101P X-CMS-RootMailID: 20180309162650epcas1p117f2feb3b030f08733884288a17cf933 X-RootMTR: 20180309162650epcas1p117f2feb3b030f08733884288a17cf933 References: Sender: linux-fbdev-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-fbdev@vger.kernel.org X-Virus-Scanned: ClamAV using ClamSMTP Hi Linus, Please pull fbdev fix for v4.16-rc5 (just a single fix to close kernel data leak in FBIOGETCMAP_SPARC ioctl). Best regards, --- Bartlomiej Zolnierkiewicz Samsung R&D Institute Poland Samsung Electronics The following changes since commit 661e50bc853209e41a5c14a290ca4decc43cbfd1: Linux 4.16-rc4 (2018-03-04 14:54:11 -0800) are available in the git repository at: https://github.com/bzolnier/linux.git tags/fbdev-v4.16-rc5 for you to fetch changes up to 250c6c49e3b68756b14983c076183568636e2bde: fbdev: Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in sbusfb_ioctl_helper(). (2018-03-07 14:00:34 +0100) ---------------------------------------------------------------- fbdev fix for v4.16-rc5: - fix kernel data leak in FBIOGETCMAP_SPARC ioctl (Peter Malone) ---------------------------------------------------------------- Bartlomiej Zolnierkiewicz (1): Merge tag 'v4.16-rc4' of git://git.kernel.org/.../torvalds/linux into fbdev-for-next Peter Malone (1): fbdev: Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in sbusfb_ioctl_helper(). drivers/video/fbdev/sbuslib.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe linux-fbdev" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html diff --git a/drivers/video/fbdev/sbuslib.c b/drivers/video/fbdev/sbuslib.c index af6fc97..a436d44 100644 --- a/drivers/video/fbdev/sbuslib.c +++ b/drivers/video/fbdev/sbuslib.c @@ -122,7 +122,7 @@ int sbusfb_ioctl_helper(unsigned long cmd, unsigned long arg, unsigned char __user *ured; unsigned char __user *ugreen; unsigned char __user *ublue; - int index, count, i; + unsigned int index, count, i; if (get_user(index, &c->index) || __get_user(count, &c->count) || @@ -161,7 +161,7 @@ int sbusfb_ioctl_helper(unsigned long cmd, unsigned long arg, unsigned char __user *ugreen; unsigned char __user *ublue; struct fb_cmap *cmap = &info->cmap; - int index, count, i; + unsigned int index, count, i; u8 red, green, blue; if (get_user(index, &c->index) ||