linux-kernel - Re: [v3.12.y][v3.13.y-ckt][3.14.y][3.16.y-ckt][3.18.y][3.19.y][V2][PATCH 0/1] n_tty: Fix read buffer overwrite when no newline

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1430495870.25872.14.camel@fourier>
Date:	Fri, 01 May 2015 08:57:50 -0700
From:	Kamal Mostafa <kamal@...onical.com>
To:	Joseph Salisbury <joseph.salisbury@...onical.com>
Cc:	gregkh@...uxfoundation.org, luis.henriques@...onical.com,
	sasha.levin@...cle.com, kamal.mostafa@...onical.com,
	jslaby@...e.cz, peter@...leysoftware.com,
	linux-kernel@...r.kernel.org, stable@...r.kernel.org
Subject: Re:
 [v3.12.y][v3.13.y-ckt][3.14.y][3.16.y-ckt][3.18.y][3.19.y][V2][PATCH 0/1]
 n_tty: Fix read buffer overwrite when no newline

On Thu, 2015-04-16 at 14:57 -0400, Joseph Salisbury wrote:
> Hello,
> 
> Please consider including mainline commit fb5ef9e7da39968fec6d6f37f20a23d23740c75e 
> in the next v3.12.y, v3.13.y-ckt, v3.14.y, 3.16.y-ckt, 3.18.y, and 3.19.y stable releases.  
> It was included mainline as of v4.0-rc1.  It has been tested and confirmed to resolve
> http://bugs.launchpad.net/bugs/1381005 .  This bug was introduced in v3.12-rc1 when 
> commit 24a89d1 was applied.  This commit is not needed in stable kernels prior to 
> v3.12.y.
> 
> 
> commit fb5ef9e7da39968fec6d6f37f20a23d23740c75e
> Author: Peter Hurley <peter@...leysoftware.com>
> Date:   Fri Jan 16 15:05:39 2015 -0500
> 
>     n_tty: Fix read buffer overwrite when no newline
> 
> 
> This commit does not apply cleanly to the kernels versions mentined, so I performed 
> a backport, which is in email 1/1.
> 
> The 3.12.y and 3.13.y-ckt stable releases first need a cherry pick of commit
> 5c32d12378313e0096ea0d450462aa638a90fb6e.  This is because in commit 5c32d123
> n_tty_receive_buf and n_tty_receive_buf2 were merged into n_tty_receive_buf_common,
> which is where the backport makes the needed changes. 
> 
> 
> Sincerely,
> 
> Joseph Salisbury
> 
> Peter Hurley (1):
>   n_tty: Fix read buffer overwrite when no newline
> 
>  drivers/tty/n_tty.c | 106 +++++++++++++++++++++++++++++++++++++++-------------
>  1 file changed, 79 insertions(+), 27 deletions(-)
> 

Queued up for 3.13-stable.  Thanks, Joseph and Peter!

 -Kamal


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/