linux-kernel - [3.14.y][3.16.y-ckt][3.18.y][3.19.y][PATCH 0/1] n_tty: Fix read buffer overwrite when no newline

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 15 Apr 2015 13:39:02 -0400
From:	Joseph Salisbury <joseph.salisbury@...onical.com>
To:	gregkh@...uxfoundation.org, luis.henriques@...onical.com,
	sasha.levin@...cle.com, kamal.mostafa@...onical.com, jslaby@...e.cz
Cc:	peter@...leysoftware.com, linux-kernel@...r.kernel.org,
	stable@...r.kernel.org
Subject: [3.14.y][3.16.y-ckt][3.18.y][3.19.y][PATCH 0/1] n_tty: Fix read buffer overwrite when no newline

Hello,

Please consider including upstream commit fb5ef9e7da39968fec6d6f37f20a23d23740c75e 
in the next v3.14.y, 3.16.y-ckt, 3.18.y, and 3.19.y stable releases.  It was
included upstream as of v4.0-rc1.  It has been tested and confirmed to resolve
http://bugs.launchpad.net/bugs/1381005 .  This bug was introduced in v3.12-rc1 when 
commit 24a89d1 was applied.  This commit is not needed in stable kernels prior to 
v3.12.y.

commit fb5ef9e7da39968fec6d6f37f20a23d23740c75e
Author: Peter Hurley <peter@...leysoftware.com>
Date:   Fri Jan 16 15:05:39 2015 -0500

    n_tty: Fix read buffer overwrite when no newline

This commit does not apply cleanly to the kernel versions mentined, so I performed 
a backport, which is in email 1/1.  

The 3.12.y and 3.13.y-ckt upstrem kernels can't use the cherry pick of fb5ef9e7 
becuase smp_load_acquire was not introduced until 3.14-rc1.  I'll look into 
alternative way that this bug could be fixed in 3.12.y and 3.13.y-ckt.

Sincerely, 

Joseph Salisbury

Peter Hurley (1):
  n_tty: Fix read buffer overwrite when no newline

 drivers/tty/n_tty.c | 108 +++++++++++++++++++++++++++++++++++++++-------------
 1 file changed, 81 insertions(+), 27 deletions(-)

-- 
2.1.0

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/