Dave Weinstein 0107ea0e09 arm: oabi compat: add missing access checks ...

commit 7de249964f upstream.

Add access checks to sys_oabi_epoll_wait() and sys_oabi_semtimedop().
This fixes CVE-2016-3857, a local privilege escalation under
CONFIG_OABI_COMPAT.

Reported-by: Chiachih Wu <wuchiachih@gmail.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Nicolas Pitre <nico@linaro.org>
Signed-off-by: Dave Weinstein <olorin@google.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-08-16 09:30:48 +02:00

..

boot

ARM: dts: armada-38x: fix MBUS_ID for crypto SRAM on Armada 385 Linksys

2016-07-27 09:47:39 -07:00

common

ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz()

2016-02-25 12:01:19 -08:00

configs

ARM: Fix broken USB support in multi_v7_defconfig for sunxi devices

2016-01-07 16:02:19 +01:00

crypto

…

firmware

…

include

ARM: 8579/1: mm: Fix definition of pmd_mknotpresent

2016-07-27 09:47:30 -07:00

kernel

arm: oabi compat: add missing access checks

2016-08-16 09:30:48 +02:00

kvm

arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables

2016-06-01 12:15:48 -07:00

lib

ARM: fix uaccess_with_memcpy() with SW_DOMAIN_PAN

2015-12-15 11:51:02 +00:00

mach-alpine

…

mach-asm9260

…

mach-at91

ARM: at91: fix pinctrl driver selection

2015-12-04 18:54:53 +01:00

mach-axxia

…

mach-bcm

Merge tag 'armsoc-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2015-11-10 14:56:23 -08:00

mach-berlin

…

mach-clps711x

…

mach-cns3xxx

CNS3xxx: Fix PCI cns3xxx_write_config()

2016-05-11 11:21:11 +02:00

mach-davinci

Merge tag 'armsoc-fixes-nc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2015-11-10 14:45:05 -08:00

mach-digicolor

…

mach-dove

ARM: dove: Fix legacy get_irqnr_and_base

2015-11-25 14:59:12 +00:00

mach-ebsa110

…

mach-efm32

…

mach-ep93xx

…

mach-exynos

ARM: EXYNOS: Properly skip unitialized parent clock in power domain on

2016-05-11 11:21:14 +02:00

mach-footbridge

…

mach-gemini

ARM: gemini: remove unnecessary mdio-gpio includes

2015-10-21 19:50:43 -07:00

mach-highbank

…

mach-hisi

…

mach-imx

ARM: imx6ul: Fix Micrel PHY mask

2016-07-27 09:47:30 -07:00

mach-integrator

…

mach-iop13xx

…

mach-iop32x

…

mach-iop33x

…

mach-ixp4xx

ARM: ixp4xx: fix read{b,w,l} return types

2015-12-01 23:45:30 +01:00

mach-keystone

…

mach-ks8695

…

mach-lpc18xx

…

mach-lpc32xx

…

mach-mediatek

Merge tag 'armsoc-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2015-11-10 14:56:23 -08:00

mach-meson

…

mach-mmp

…

mach-moxart

…

mach-mv78xx0

…

mach-mvebu

ARM: mvebu: fix HW I/O coherency related deadlocks

2016-07-27 09:47:39 -07:00

mach-mxs

…

mach-netx

…

mach-nomadik

…

mach-nspire

…

mach-omap1

…

mach-omap2

ARM: OMAP3: Add cpuidle parameters table for omap3430

2016-05-04 14:48:53 -07:00

mach-orion5x

ARM: orion5x: Fix legacy get_irqnr_and_base

2015-11-25 15:01:00 +00:00

mach-picoxcell

…

mach-prima2

ARM: prima2: always enable reset controller

2016-05-04 14:48:53 -07:00

mach-pxa

ARM: pxa: use PWM lookup table for all machines

2015-12-11 00:27:58 +01:00

mach-qcom

ARM: Remove __ref on hotplug cpu die path

2015-10-22 09:55:03 -07:00

mach-realview

ARM: Remove __ref on hotplug cpu die path

2015-10-22 09:55:03 -07:00

mach-rockchip

…

mach-rpc

…

mach-s3c24xx

cpufreq: s3c24xx: Do not mark s3c2410_plls_add as __init

2015-11-27 10:10:32 +09:00

mach-s3c64xx

ASoC: samsung: pass DMA channels as pointers

2016-04-12 09:08:32 -07:00

mach-s5pv210

…

mach-sa1100

…

mach-shmobile

ARM: shmobile: r8a7793: proper constness with __initconst

2015-11-22 17:13:13 -08:00

mach-socfpga

ARM: SoCFPGA: Fix secondary CPU startup in thumb2 kernel

2016-05-11 11:21:14 +02:00

mach-spear

Merge tag 'armsoc-cleanup' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2015-11-10 14:48:36 -08:00

mach-sti

…

mach-stm32

…

mach-sunxi

Merge tag 'armsoc-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2015-11-10 14:56:23 -08:00

mach-tegra

Merge tag 'armsoc-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2015-11-10 14:56:23 -08:00

mach-u300

Merge tag 'spi-v4.4' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi

2015-11-05 13:15:12 -08:00

mach-uniphier

ARM: uniphier: rework SMP operations to use trampoline code

2015-10-27 09:20:53 +09:00

mach-ux500

Merge tag 'armsoc-cleanup' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2015-11-10 14:48:36 -08:00

mach-versatile

…

mach-vexpress

ARM: Remove __ref on hotplug cpu die path

2015-10-22 09:55:03 -07:00

mach-vt8500

…

mach-w90x900

…

mach-zx

ARM: zx: only build power domain code when CONFIG_PM=y

2015-11-19 16:16:45 +01:00

mach-zynq

…

mm

Merge branch 'libnvdimm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

2015-12-17 11:20:13 -08:00

net

ARM: net: bpf: fix zero right shift

2016-01-06 01:32:09 -05:00

nwfpe

…

oprofile

…

plat-iop

…

plat-omap

…

plat-orion

…

plat-pxa

…

plat-samsung

ASoC: samsung: pass DMA channels as pointers

2016-04-12 09:08:32 -07:00

plat-versatile

…

probes

…

tools

…

vdso

ARM: 8449/1: fix bug in vdsomunge swab32 macro

2015-10-29 15:20:15 +00:00

vfp

…

xen

mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep and avoiding waking kswapd

2015-11-06 17:50:42 -08:00

Kconfig

ARM: 8454/1: OF implies OF_FLATTREE

2015-11-28 23:26:12 +00:00

Kconfig-nommu

…

Kconfig.debug

ARM: debug-ll: fix BCM63xx entry for multiplatform

2016-03-03 15:07:08 -08:00

Makefile

…