TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
f14c64efb9d3ce00a89997cb8fa63a54808bb85e
twx-linux/lib
T
History
Alexander Potapenko 73e82ee9f0 lib/stackdepot.c: fix global out-of-bounds in stack_slabs 
[ Upstream commit 305e519ce4 ]

Walter Wu has reported a potential case in which init_stack_slab() is
called after stack_slabs[STACK_ALLOC_MAX_SLABS - 1] has already been
initialized.  In that case init_stack_slab() will overwrite
stack_slabs[STACK_ALLOC_MAX_SLABS], which may result in a memory
corruption.

Link: http://lkml.kernel.org/r/20200218102950.260263-1-glider@google.com
Fixes: cd11016e5f ("mm, kasan: stackdepot implementation. Enable stackdepot for SLAB")
Signed-off-by: Alexander Potapenko <glider@google.com>
Reported-by: Walter Wu <walter-zh.wu@mediatek.com>
Cc: Dmitry Vyukov <dvyukov@google.com>
Cc: Matthias Brugger <matthias.bgg@gmail.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Josh Poimboeuf <jpoimboe@redhat.com>
Cc: Kate Stewart <kstewart@linuxfoundation.org>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-02-28 15:42:50 +01:00
..
842
…
fonts
…
lz4
…
lzo
…
mpi
lib/mpi: Fix karactx leak in mpi_powm
2019-07-10 09:55:46 +02:00
raid6
lib: raid6: fix awk build warnings
2019-12-21 10:42:00 +01:00
reed_solomon
rslib: Fix handling of of caller provided syndrome
2019-08-04 09:33:23 +02:00
xz
…
zlib_deflate
…
zlib_inflate
…
.gitignore
…
argv_split.c
…
asn1_decoder.c
ASN.1: check for error from ASN1_OP_END__ACT actions
2017-12-14 09:28:12 +01:00
assoc_array.c
assoc_array: Fix shortcut creation
2019-03-23 13:19:42 +01:00
atomic64_test.c
…
atomic64.c
…
audit.c
…
bcd.c
…
bch.c
…
bitmap.c
bitmap: Add bitmap_alloc(), bitmap_zalloc() and bitmap_free()
2020-01-29 10:24:41 +01:00
bitrev.c
…
bsearch.c
kprobes: Prohibit probing on bsearch()
2019-04-05 22:29:11 +02:00
btree.c
…
bug.c
…
build_OID_registry
…
bust_spinlocks.c
…
chacha20.c
…
check_signature.c
…
checksum.c
…
clz_ctz.c
…
clz_tab.c
…
cmdline.c
…
compat_audit.c
…
cordic.c
…
cpu_rmap.c
…
cpu-notifier-error-inject.c
…
cpumask.c
…
crc7.c
…
crc8.c
…
crc16.c
…
crc32.c
…
crc32defs.h
…
crc-ccitt.c
…
crc-itu-t.c
…
crc-t10dif.c
…
ctype.c
…
debug_info.c
…
debug_locks.c
locking/lockdep: Fix debug_locks off performance problem
2018-11-13 11:16:48 -08:00
debugobjects.c
debugobjects: avoid recursive calls with kmemleak
2018-12-17 09:38:35 +01:00
dec_and_lock.c
…
decompress_bunzip2.c
…
decompress_inflate.c
…
decompress_unlz4.c
…
decompress_unlzma.c
…
decompress_unlzo.c
…
decompress_unxz.c
…
decompress.c
…
devres.c
devres: allow const resource arguments
2020-01-29 10:24:28 +01:00
digsig.c
…
div64.c
lib/div64.c: off by one in shift
2019-04-20 09:07:54 +02:00
dma-debug.c
dma-debug: add a schedule point in debug_dma_dump_mappings()
2020-01-04 13:40:44 +01:00
dma-noop.c
…
dump_stack.c
dump_stack: avoid the livelock of the dump_lock
2019-11-12 19:15:43 +01:00
dynamic_debug.c
dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0
2017-12-14 09:28:22 +01:00
dynamic_queue_limits.c
…
earlycpio.c
…
extable.c
…
fault-inject.c
…
fdt_empty_tree.c
…
fdt_ro.c
…
fdt_rw.c
…
fdt_strerror.c
…
fdt_sw.c
…
fdt_wip.c
…
fdt.c
…
find_bit.c
…
flex_array.c
…
flex_proportions.c
…
gcd.c
…
gen_crc32table.c
…
genalloc.c
lib/genalloc.c: include vmalloc.h
2019-12-05 15:35:05 +01:00
glob.c
…
halfmd4.c
…
hexdump.c
…
hweight.c
…
idr.c
…
inflate.c
…
int_sqrt.c
lib/int_sqrt: optimize initial value compute
2019-04-05 22:29:04 +02:00
interval_tree_test.c
lib/interval_tree_test.c: allow users to limit scope of endpoint
2018-12-21 14:11:30 +01:00
interval_tree.c
…
iomap_copy.c
…
iomap.c
…
iommu-common.c
…
iommu-helper.c
…
ioremap.c
ioremap: Update pgtable free interfaces with addr
2018-08-17 20:59:29 +02:00
iov_iter.c
…
irq_poll.c
…
irq_regs.c
…
is_single_threaded.c
…
jedec_ddr_data.c
…
kasprintf.c
…
Kconfig
…
Kconfig.debug
kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
2019-10-07 18:53:19 +02:00
Kconfig.kasan
…
Kconfig.kgdb
…
Kconfig.kmemcheck
…
Kconfig.ubsan
…
kfifo.c
Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
2020-01-29 10:24:30 +01:00
klist.c
scsi: klist: Make it safe to use klists in atomic context
2018-10-03 17:01:45 -07:00
kobject_uevent.c
…
kobject.c
kobject: Export kobject_get_unless_zero()
2020-01-14 20:04:25 +01:00
kstrtox.c
…
kstrtox.h
…
lcm.c
…
libcrc32c.c
…
list_debug.c
…
list_sort.c
…
llist.c
…
locking-selftest-hardirq.h
…
locking-selftest-mutex.h
…
locking-selftest-rlock-hardirq.h
…
locking-selftest-rlock-softirq.h
…
locking-selftest-rlock.h
…
locking-selftest-rsem.h
…
locking-selftest-softirq.h
…
locking-selftest-spin-hardirq.h
…
locking-selftest-spin-softirq.h
…
locking-selftest-spin.h
…
locking-selftest-wlock-hardirq.h
…
locking-selftest-wlock-softirq.h
…
locking-selftest-wlock.h
…
locking-selftest-wsem.h
…
locking-selftest.c
…
lockref.c
…
lru_cache.c
…
Makefile
siphash: add cryptographically secure PRF
2019-08-25 10:51:42 +02:00
md5.c
…
memory-notifier-error-inject.c
…
memweight.c
…
net_utils.c
…
netdev-notifier-error-inject.c
…
nlattr.c
…
nmi_backtrace.c
…
nodemask.c
…
notifier-error-inject.c
…
notifier-error-inject.h
…
of-reconfig-notifier-error-inject.c
…
oid_registry.c
509: fix printing uninitialized stack memory when OID is empty
2018-02-25 11:05:48 +01:00
once.c
…
parser.c
…
pci_iomap.c
…
percpu_counter.c
…
percpu_ida.c
…
percpu_test.c
…
percpu-refcount.c
…
plist.c
…
pm-notifier-error-inject.c
…
radix-tree.c
…
random32.c
…
ratelimit.c
…
rational.c
…
rbtree_test.c
lib/rbtree-test: lower default params
2018-12-21 14:11:30 +01:00
rbtree.c
…
reciprocal_div.c
…
rhashtable.c
rhashtable: add schedule points
2018-10-18 09:13:24 +02:00
sbitmap.c
…
scatterlist.c
lib/scatterlist.c: adjust indentation in __sg_alloc_table
2020-02-28 15:42:41 +01:00
seq_buf.c
seq_buf: Make seq_buf_puts() null-terminate the buffer
2019-02-12 19:44:57 +01:00
sg_pool.c
…
sg_split.c
…
sha1.c
…
show_mem.c
…
siphash.c
siphash: implement HalfSipHash1-3 for hash tables
2019-08-25 10:51:42 +02:00
smp_processor_id.c
…
sort.c
…
stackdepot.c
lib/stackdepot.c: fix global out-of-bounds in stack_slabs
2020-02-28 15:42:50 +01:00
stmp_device.c
…
string_helpers.c
…
string.c
lib/strscpy: Shut up KASAN false-positives in strscpy()
2019-08-04 09:33:32 +02:00
strncpy_from_user.c
mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions
2019-05-31 06:48:17 -07:00
strnlen_user.c
mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions
2019-05-31 06:48:17 -07:00
swiotlb.c
swiotlb: clean up reporting
2018-12-13 09:20:29 +01:00
syscall.c
…
test_bitmap.c
…
test_bpf.c
test_bpf: Fix testing with CONFIG_BPF_JIT_ALWAYS_ON=y on other arches
2018-11-10 07:42:54 -08:00
test_firmware.c
…
test_hash.c
…
test_hexdump.c
test_hexdump: use memcpy instead of strncpy
2018-12-08 13:05:04 +01:00
test_kasan.c
lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()
2020-02-14 16:31:00 -05:00
test_module.c
…
test_printf.c
…
test_rhashtable.c
…
test_siphash.c
siphash: implement HalfSipHash1-3 for hash tables
2019-08-25 10:51:42 +02:00
test_static_key_base.c
…
test_static_keys.c
…
test_user_copy.c
…
test_uuid.c
…
test-kstrtox.c
…
test-string_helpers.c
…
textsearch.c
…
timerqueue.c
…
ts_bm.c
…
ts_fsm.c
…
ts_kmp.c
…
ubsan.c
ubsan: Fix nasty -Wbuiltin-declaration-mismatch GCC-9 warnings
2019-05-10 17:52:07 +02:00
ubsan.h
lib/ubsan: add type mismatch handler for new GCC/Clang
2018-02-17 13:21:20 +01:00
ucs2_string.c
…
uuid.c
…
vsprintf.c
lib/vsprintf: Remove atomic-unsafe support for %pCr
2018-07-03 11:23:06 +02:00
win_minmax.c
…