linux-kernel - [git pull] uaccess fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160914154746.GD2356@ZenIV.linux.org.uk>
Date:   Wed, 14 Sep 2016 16:47:47 +0100
From:   Al Viro <viro@...IV.linux.org.uk>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-kernel@...r.kernel.org
Subject: [git pull] uaccess fixes

	Fixes for broken uaccess primitives - mostly lack of proper zeroing
in copy_from_user()/get_user()/__get_user(), but for several architectures
there's more (broken clear_user() on frv and strncpy_from_user() on hexagon).
All of that is rc2-based stable fodder; usercopy stuff that went into mainline
since then has added 3 conflicts - in parisc, ppc and itanic uaccess.h.
Conflicts are trivial; I've pushed my variant of conflict resolution into
#proposed-merge.

The following changes since commit 694d0d0bb2030d2e36df73e2d23d5770511dbc8d:

  Linux 4.8-rc2 (2016-08-14 19:11:36 -0700)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs.git uaccess-fixes

for you to fetch changes up to 8630c32275bac2de6ffb8aea9d9b11663e7ad28e:

  avr32: fix copy_from_user() (2016-09-13 17:50:18 -0400)

----------------------------------------------------------------
Al Viro (27):
      alpha: fix copy_from_user()
      asm-generic: make copy_from_user() zero the destination properly
      asm-generic: make get_user() clear the destination on errors
      cris: buggered copy_from_user/copy_to_user/clear_user
      frv: fix clear_user()
      hexagon: fix strncpy_from_user() error return
      ia64: copy_from_user() should zero the destination on access_ok() failure
      metag: copy_from_user() should zero the destination on access_ok() failure
      mips: copy_from_user() must zero the destination on access_ok() failure
      mn10300: failing __get_user() and get_user() should zero
      mn10300: copy_from_user() should zero on access_ok() failure...
      nios2: copy_from_user() should zero the tail of destination
      nios2: fix __get_user()
      openrisc: fix copy_from_user()
      parisc: fix copy_from_user()
      ppc32: fix copy_from_user()
      s390: get_user() should zero on failure
      score: fix __get_user/get_user
      score: fix copy_from_user() and friends
      sh64: failing __get_user() should zero
      sh: fix copy_from_user()
      sparc32: fix copy_from_user()
      blackfin: fix copy_from_user()
      m32r: fix __get_user()
      microblaze: fix copy_from_user()
      microblaze: fix __get_user()
      avr32: fix copy_from_user()

Vineet Gupta (1):
      ARC: uaccess: get_user to zero out dest in cause of fault

 arch/alpha/include/asm/uaccess.h      | 19 ++++------
 arch/arc/include/asm/uaccess.h        | 11 +++++-
 arch/avr32/include/asm/uaccess.h      | 11 +++++-
 arch/avr32/kernel/avr32_ksyms.c       |  2 +-
 arch/avr32/lib/copy_user.S            |  4 +-
 arch/blackfin/include/asm/uaccess.h   |  9 +++--
 arch/cris/include/asm/uaccess.h       | 71 ++++++++++++++++-------------------
 arch/frv/include/asm/uaccess.h        | 12 ++++--
 arch/hexagon/include/asm/uaccess.h    |  3 +-
 arch/ia64/include/asm/uaccess.h       | 25 ++++++------
 arch/m32r/include/asm/uaccess.h       |  2 +-
 arch/metag/include/asm/uaccess.h      |  3 +-
 arch/microblaze/include/asm/uaccess.h | 11 ++++--
 arch/mips/include/asm/uaccess.h       |  3 ++
 arch/mn10300/include/asm/uaccess.h    |  1 +
 arch/mn10300/lib/usercopy.c           |  4 +-
 arch/nios2/include/asm/uaccess.h      | 13 ++++---
 arch/openrisc/include/asm/uaccess.h   | 35 ++++++-----------
 arch/parisc/include/asm/uaccess.h     |  6 ++-
 arch/powerpc/include/asm/uaccess.h    | 25 +-----------
 arch/s390/include/asm/uaccess.h       |  8 ++--
 arch/score/include/asm/uaccess.h      | 46 ++++++++++++-----------
 arch/sh/include/asm/uaccess.h         |  5 ++-
 arch/sh/include/asm/uaccess_64.h      |  1 +
 arch/sparc/include/asm/uaccess_32.h   |  4 +-
 include/asm-generic/uaccess.h         | 20 ++++++----
 26 files changed, 180 insertions(+), 174 deletions(-)