Dave Weinstein 0107ea0e09 arm: oabi compat: add missing access checks ...

commit 7de249964f upstream.

Add access checks to sys_oabi_epoll_wait() and sys_oabi_semtimedop().
This fixes CVE-2016-3857, a local privilege escalation under
CONFIG_OABI_COMPAT.

Reported-by: Chiachih Wu <wuchiachih@gmail.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Nicolas Pitre <nico@linaro.org>
Signed-off-by: Dave Weinstein <olorin@google.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-08-16 09:30:48 +02:00

..

.gitignore

…

arch_timer.c

…

armksyms.c

Merge branch 'uaccess' into fixes

2015-09-11 19:18:28 +01:00

asm-offsets.c

…

atags_compat.c

…

atags_parse.c

…

atags_proc.c

…

atags.h

…

bios32.c

ARM/PCI: Move align_resource function pointer to pci_host_bridge structure

2015-11-25 13:23:38 -06:00

calls.S

ARM: wire up mlock2 syscall

2015-11-18 11:20:24 +00:00

cpuidle.c

…

crash_dump.c

…

debug.S

…

devtree.c

arm: add missing of_node_put

2015-10-26 10:58:26 +00:00

dma-isa.c

…

dma.c

…

early_printk.c

…

elf.c

…

entry-armv.S

ARM: remove user cmpxchg syscall

2015-10-03 16:36:45 +01:00

entry-common.S

Merge branch 'uaccess' into fixes

2015-09-11 19:18:28 +01:00

entry-ftrace.S

…

entry-header.S

ARM: entry: provide uaccess assembly macro hooks

2015-08-26 20:27:02 +01:00

entry-v7m.S

…

fiq.c

…

fiqasm.S

…

ftrace.c

…

head-common.S

…

head-nommu.S

ARM: 8383/1: nommu: avoid deprecated source register on mov

2015-06-12 21:18:48 +01:00

head.S

Merge branch 'uaccess' into fixes

2015-09-11 19:18:28 +01:00

hibernate.c

…

hw_breakpoint.c

ARM: 8436/1: hw_breakpoint: remove unnecessary header

2015-10-03 16:36:44 +01:00

hyp-stub.S

…

insn.c

…

io.c

…

irq.c

ARM: uniphier: add outer cache support

2015-10-27 09:20:50 +09:00

isa.c

…

iwmmxt.S

…

jump_label.c

jump_label: Rename JUMP_LABEL_{EN,DIS}ABLE to JUMP_LABEL_{JMP,NOP}

2015-08-03 11:34:12 +02:00

kgdb.c

ARM: 8428/1: kgdb: Fix registers on sleeping tasks

2015-10-03 16:36:45 +01:00

machine_kexec.c

…

Makefile

Merge branch 'psci/for-rmk' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux into devel-stable

2015-08-10 15:57:44 +01:00

module-plts.c

ARM: 8364/1: fix BE32 module loading

2015-06-02 09:58:17 +01:00

module.c

…

module.lds

…

opcodes.c

…

patch.c

…

perf_callchain.c

…

perf_event_v6.c

arm: perf: factor arm_pmu core out to drivers

2015-07-31 15:01:14 +01:00

perf_event_v7.c

arm: perf: factor arm_pmu core out to drivers

2015-07-31 15:01:14 +01:00

perf_event_xscale.c

arm: perf: factor arm_pmu core out to drivers

2015-07-31 15:01:14 +01:00

perf_regs.c

…

pj4-cp0.c

…

process.c

ARM: report proper DACR value in oops dumps

2015-12-04 19:20:48 +00:00

psci_smp.c

ARM: Remove __ref on hotplug cpu die path

2015-10-22 09:55:03 -07:00

psci-call.S

…

ptrace.c

ARM: fix PTRACE_SETVFPREGS on SMP systems

2016-06-24 10:18:18 -07:00

reboot.c

ARM: 8400/1: use virt_to_idmap to get phys_reset address

2015-07-17 15:08:17 +01:00

reboot.h

…

relocate_kernel.S

…

return_address.c

…

setup.c

Merge branch 'devel-stable' into for-linus

2015-09-03 15:28:50 +01:00

signal.c

Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

2015-09-19 21:05:02 -07:00

sigreturn_codes.S

…

sleep.S

ARM: fix new BSYM() usage introduced via for-arm-soc branch

2015-06-12 21:19:35 +01:00

smp_scu.c

…

smp_tlb.c

…

smp_twd.c

ARM: clean up TWD after previous patch

2015-10-09 16:22:53 +01:00

smp.c

ARM: 8439/1: Fix backtrace generation when IPI is masked

2015-10-03 16:40:51 +01:00

stacktrace.c

…

suspend.c

…

swp_emulate.c

ARM: 8475/1: SWP emulation: Restore original *data when failed

2015-12-15 11:51:42 +00:00

sys_arm.c

…

sys_oabi-compat.c

arm: oabi compat: add missing access checks

2016-08-16 09:30:48 +02:00

tcm.c

ARM: 8388/1: tcm: Don't crash when TCM banks are protected by TrustZone

2015-06-06 10:37:28 +01:00

thumbee.c

…

time.c

clocksource: cosmetic: Drop OF 'dependency' from symbols

2015-10-01 02:18:39 +02:00

topology.c

…

traps.c

ARM: remove user cmpxchg syscall

2015-10-03 16:36:45 +01:00

unwind.c

…

v7m.c

…

vdso.c

ARM: 8410/1: VDSO: fix coarse clock monotonicity regression

2015-08-11 13:42:44 +01:00

vmlinux.lds.S

…

xscale-cp0.c

…