linux-kernel - Re: [v3.12.y][v3.13.y-ckt][3.14.y][3.16.y-ckt][3.18.y][3.19.y][V2][PATCH 0/1] n_tty: Fix read buffer overwrite when no newline

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20150422131854.GB3671@charon>
Date:	Wed, 22 Apr 2015 14:18:54 +0100
From:	Luis Henriques <luis.henriques@...onical.com>
To:	Joseph Salisbury <joseph.salisbury@...onical.com>
Cc:	gregkh@...uxfoundation.org, sasha.levin@...cle.com,
	kamal.mostafa@...onical.com, jslaby@...e.cz,
	peter@...leysoftware.com, linux-kernel@...r.kernel.org,
	stable@...r.kernel.org
Subject: Re:
 [v3.12.y][v3.13.y-ckt][3.14.y][3.16.y-ckt][3.18.y][3.19.y][V2][PATCH 0/1]
 n_tty: Fix read buffer overwrite when no newline

On Thu, Apr 16, 2015 at 02:57:26PM -0400, Joseph Salisbury wrote:
> Hello,
> 
> Please consider including mainline commit fb5ef9e7da39968fec6d6f37f20a23d23740c75e 
> in the next v3.12.y, v3.13.y-ckt, v3.14.y, 3.16.y-ckt, 3.18.y, and 3.19.y stable releases.  
> It was included mainline as of v4.0-rc1.  It has been tested and confirmed to resolve
> http://bugs.launchpad.net/bugs/1381005 .  This bug was introduced in v3.12-rc1 when 
> commit 24a89d1 was applied.  This commit is not needed in stable kernels prior to 
> v3.12.y.
> 
> 
> commit fb5ef9e7da39968fec6d6f37f20a23d23740c75e
> Author: Peter Hurley <peter@...leysoftware.com>
> Date:   Fri Jan 16 15:05:39 2015 -0500
> 
>     n_tty: Fix read buffer overwrite when no newline
> 
> 
> This commit does not apply cleanly to the kernels versions mentined, so I performed 
> a backport, which is in email 1/1.
> 
> The 3.12.y and 3.13.y-ckt stable releases first need a cherry pick of commit
> 5c32d12378313e0096ea0d450462aa638a90fb6e.  This is because in commit 5c32d123
> n_tty_receive_buf and n_tty_receive_buf2 were merged into n_tty_receive_buf_common,
> which is where the backport makes the needed changes. 
> 
> 

Thanks a lot for the backport.  I'm queuing it for the 3.16 kernel.

Cheers,
--
Luís


> Sincerely,
> 
> Joseph Salisbury
> 
> Peter Hurley (1):
>   n_tty: Fix read buffer overwrite when no newline
> 
>  drivers/tty/n_tty.c | 106 +++++++++++++++++++++++++++++++++++++++-------------
>  1 file changed, 79 insertions(+), 27 deletions(-)
> 
> -- 
> 2.1.0
> 
> --
> To unsubscribe from this list: send the line "unsubscribe stable" in
> the body of a message to majordomo@...r.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/