Ilya Matveychikov 7c679fe729 lib/cmdline.c: fix get_options() overflow while parsing ranges ...

commit a91e0f680b upstream.

When using get_options() it's possible to specify a range of numbers,
like 1-100500.  The problem is that it doesn't track array size while
calling internally to get_range() which iterates over the range and
fills the memory with numbers.

Link: http://lkml.kernel.org/r/2613C75C-B04D-4BFF-82A6-12F97BA0F620@gmail.com
Signed-off-by: Ilya V. Matveychikov <matvejchikov@gmail.com>
Cc: Jonathan Corbet <corbet@lwn.net>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-06-29 13:00:28 +02:00

..

842

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial

2016-03-17 21:38:27 -07:00

fonts

…

lz4

lib: lz4: cleanup unaligned access efficiency detection

2016-04-13 09:22:49 -07:00

lzo

…

mpi

mpi: Fix NULL ptr dereference in mpi_powm() [ver #3]

2016-11-25 12:57:50 +11:00

raid6

Merge tag 'md/4.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/shli/md

2016-10-07 09:45:43 -07:00

reed_solomon

…

xz

…

zlib_deflate

…

zlib_inflate

…

.gitignore

…

argv_split.c

…

asn1_decoder.c

Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

2016-05-17 09:33:39 -07:00

assoc_array.c

assoc_array: don't call compare_object() on a node

2016-04-06 14:06:48 +01:00

atomic64_test.c

atomic64: no need for CONFIG_ARCH_HAS_ATOMIC64_DEC_IF_POSITIVE

2016-10-07 18:46:30 -07:00

atomic64.c

locking/atomic: Implement atomic{,64,_long}_fetch_{add,sub,and,andnot,or,xor}{,_relaxed,_acquire,_release}()

2016-06-16 10:48:32 +02:00

audit.c

…

bcd.c

…

bch.c

…

bitmap.c

lib/bitmap.c: enhance bitmap syntax

2016-10-11 15:06:30 -07:00

bitrev.c

…

bsearch.c

…

btree.c

…

bug.c

lib/bug.c: use common WARN helper

2016-03-17 15:09:34 -07:00

build_OID_registry

…

bust_spinlocks.c

…

chacha20.c

random: replace non-blocking pool with a Chacha20-based CRNG

2016-07-03 00:57:23 -04:00

check_signature.c

…

checksum.c

…

clz_ctz.c

…

clz_tab.c

…

cmdline.c

lib/cmdline.c: fix get_options() overflow while parsing ranges

2017-06-29 13:00:28 +02:00

compat_audit.c

…

cordic.c

…

cpu_rmap.c

…

cpu-notifier-error-inject.c

fault-injection/cpu: Convert to hotplug state machine

2016-09-19 21:44:31 +02:00

cpumask.c

…

crc7.c

…

crc8.c

…

crc16.c

…

crc32.c

crc32: use ktime_get_ns() for measurement

2016-08-02 19:35:08 -04:00

crc32defs.h

…

crc-ccitt.c

…

crc-itu-t.c

…

crc-t10dif.c

…

ctype.c

…

debug_info.c

…

debug_locks.c

…

debugobjects.c

lib/debugobjects: export for use in modules

2016-11-30 16:32:52 -08:00

dec_and_lock.c

…

decompress_bunzip2.c

…

decompress_inflate.c

…

decompress_unlz4.c

…

decompress_unlzma.c

…

decompress_unlzo.c

…

decompress_unxz.c

…

decompress.c

…

devres.c

…

digsig.c

lib/digsig: digsig_verify_rsa(): return -EINVAL if modulo length is zero

2016-05-31 16:42:00 +08:00

div64.c

…

dma-debug.c

Merge tag 'dmaengine-4.9-rc1' of git://git.infradead.org/users/vkoul/slave-dma

2016-10-06 17:13:54 -07:00

dma-noop.c

dma-mapping: use unsigned long for dma_attrs

2016-08-04 08:50:07 -04:00

dump_stack.c

…

dynamic_debug.c

dynamic_debug: add jump label support

2016-08-04 08:50:07 -04:00

dynamic_queue_limits.c

…

earlycpio.c

lib/cpio: Make find_cpio_data()'s offset arg optional

2016-06-08 11:04:19 +02:00

extable.c

…

fault-inject.c

…

fdt_empty_tree.c

…

fdt_ro.c

…

fdt_rw.c

…

fdt_strerror.c

…

fdt_sw.c

…

fdt_wip.c

…

fdt.c

…

find_bit.c

…

flex_array.c

…

flex_proportions.c

…

gcd.c

lib/GCD.c: use binary GCD algorithm instead of Euclidean

2016-05-20 17:58:30 -07:00

gen_crc32table.c

…

genalloc.c

lib/genalloc.c: start search from start of chunk

2016-10-27 18:43:43 -07:00

glob.c

…

halfmd4.c

…

hexdump.c

…

hweight.c

x86/hweight: Get rid of the special calling convention

2016-06-08 15:01:02 +02:00

idr.c

…

inflate.c

…

int_sqrt.c

…

interval_tree_test.c

…

interval_tree.c

…

iomap_copy.c

…

iomap.c

…

iommu-common.c

…

iommu-helper.c

lib/iommu-helper: skip to next segment

2016-08-02 19:35:07 -04:00

ioremap.c

…

iov_iter.c

new privimitive: iov_iter_revert()

2017-04-21 09:31:21 +02:00

irq_poll.c

Merge tag 'gcc-plugins-v4.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux

2016-10-15 10:03:15 -07:00

irq_regs.c

…

is_single_threaded.c

…

jedec_ddr_data.c

…

kasprintf.c

…

Kconfig

Merge branch 'akpm' (patches from Andrew)

2016-10-07 21:38:00 -07:00

Kconfig.debug

config: Adding the new config parameter CONFIG_PROVE_LOCKING_SMALL for sparc

2016-11-18 11:33:19 -08:00

Kconfig.kasan

mm, kasan: switch SLUB to stackdepot, enable memory quarantine for SLUB

2016-07-28 16:07:41 -07:00

Kconfig.kgdb

kgdb: depends on VT

2016-05-23 17:04:14 -07:00

Kconfig.kmemcheck

…

Kconfig.ubsan

ubsan: allow to disable the null sanitizer

2016-09-20 14:26:08 +02:00

kfifo.c

…

klist.c

…

kobject_uevent.c

…

kobject.c

…

kstrtox.c

lib/kstrtox.c: smaller _parse_integer()

2016-10-11 15:06:30 -07:00

kstrtox.h

…

lcm.c

…

libcrc32c.c

crypto: Work around deallocated stack frame reference gcc bug on sparc.

2017-06-24 07:11:17 +02:00

list_debug.c

…

list_sort.c

…

llist.c

…

locking-selftest-hardirq.h

…

locking-selftest-mutex.h

…

locking-selftest-rlock-hardirq.h

…

locking-selftest-rlock-softirq.h

…

locking-selftest-rlock.h

…

locking-selftest-rsem.h

…

locking-selftest-softirq.h

…

locking-selftest-spin-hardirq.h

…

locking-selftest-spin-softirq.h

…

locking-selftest-spin.h

…

locking-selftest-wlock-hardirq.h

…

locking-selftest-wlock-softirq.h

…

locking-selftest-wlock.h

…

locking-selftest-wsem.h

…

locking-selftest.c

locking/selftest: Fix output since KERN_CONT changes

2016-11-25 07:12:19 +01:00

lockref.c

…

lru_cache.c

…

Makefile

kcov: do not instrument lib/stackdepot.c

2016-10-11 15:06:32 -07:00

md5.c

…

memory-notifier-error-inject.c

…

memweight.c

…

net_utils.c

…

netdev-notifier-error-inject.c

…

nlattr.c

libnl: fix help of _64bit functions

2016-04-23 20:13:24 -04:00

nmi_backtrace.c

nmi_backtrace: generate one-line reports for idle cpus

2016-10-07 18:46:30 -07:00

nodemask.c

include/linux/nodemask.h: create next_node_in() helper

2016-05-19 19:12:14 -07:00

notifier-error-inject.c

…

notifier-error-inject.h

…

of-reconfig-notifier-error-inject.c

…

oid_registry.c

…

once.c

…

parser.c

…

pci_iomap.c

…

percpu_counter.c

percpu_counter: update debugobjects fixup callbacks return type

2016-05-19 19:12:14 -07:00

percpu_ida.c

…

percpu_test.c

…

percpu-refcount.c

percpu-refcount: init ->confirm_switch member properly

2016-08-11 13:52:23 -04:00

plist.c

…

pm-notifier-error-inject.c

…

radix-tree.c

Revert "radix tree test suite: fix compilation"

2016-12-09 10:41:42 -08:00

random32.c

Merge tag 'gcc-plugins-v4.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux

2016-10-15 10:03:15 -07:00

ratelimit.c

ratelimit: extend to print suppressed messages on release

2016-08-02 19:35:06 -04:00

rational.c

…

rbtree_test.c

…

rbtree.c

Introduce rb_replace_node_rcu()

2016-07-06 10:51:14 +01:00

reciprocal_div.c

…

rhashtable.c

rhashtable: Add rhlist interface

2016-09-20 04:43:36 -04:00

sbitmap.c

sbitmap: initialize weight to zero

2016-09-19 08:19:40 -06:00

scatterlist.c

…

seq_buf.c

…

sg_pool.c

lib: scatterlist: move SG pool code from SCSI driver to lib/sg_pool.c

2016-04-15 16:53:14 -04:00

sg_split.c

…

sha1.c

…

show_mem.c

…

smp_processor_id.c

…

sort.c

…

stackdepot.c

lib/stackdepot: export save/fetch stack for drivers

2016-11-11 08:12:37 -08:00

stmp_device.c

…

string_helpers.c

string_helpers: add kstrdup_quotable_file

2016-04-21 10:47:26 +10:00

string.c

lib: move strtobool() to kstrtobool()

2016-03-17 15:09:34 -07:00

strncpy_from_user.c

lib: harden strncpy_from_user

2016-10-11 15:06:30 -07:00

strnlen_user.c

unsafe_[get|put]_user: change interface to use a error target label

2016-08-08 13:02:01 -07:00

swiotlb.c

swiotlb: Add swiotlb=noforce debug option

2017-01-26 08:24:44 +01:00

syscall.c

lib/syscall: Clear return values when no stack

2017-04-08 09:30:35 +02:00

test_bitmap.c

…

test_bpf.c

bpf, arm64: fix jit branch offset related to ldimm64

2017-05-14 14:00:21 +02:00

test_firmware.c

…

test_hash.c

lib/test_hash.c: fix warning in preprocessor symbol evaluation

2016-09-01 17:52:01 -07:00

test_hexdump.c

…

test_kasan.c

kasan: support use-after-scope detection

2016-11-30 16:32:52 -08:00

test_module.c

…

test_printf.c

mm, printk: introduce new format string for flags

2016-03-15 16:55:16 -07:00

test_rhashtable.c

rhashtable-test: Fix max_size parameter description

2016-08-08 12:52:42 -07:00

test_static_key_base.c

…

test_static_keys.c

…

test_user_copy.c

usercopy: Adjust tests to deal with SMAP/PAN

2017-06-14 15:06:05 +02:00

test_uuid.c

lib/uuid: add a test module

2016-05-30 15:26:57 -07:00

test-kstrtox.c

…

test-string_helpers.c

…

textsearch.c

…

timerqueue.c

…

ts_bm.c

…

ts_fsm.c

…

ts_kmp.c

…

ubsan.c

UBSAN: fix typo in format string

2016-08-02 17:31:41 -04:00

ubsan.h

…

ucs2_string.c

lib/ucs2_string: Speed up ucs2_utf8size()

2016-09-09 16:08:46 +01:00

uuid.c

lib/uuid.c: use correct offset in uuid parser

2016-05-30 15:26:57 -07:00

vsprintf.c

lib/uuid.c: introduce a few more generic helpers

2016-05-20 17:58:30 -07:00

win_minmax.c

lib/win_minmax: windowed min or max estimator

2016-09-21 00:22:59 -04:00