You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Mikulas Patocka ed6fe9d614 Fix order of arguments to compat_put_time[spec|val] ... Commit 644595f896 ("compat: Handle COMPAT_USE_64BIT_TIME in net/socket.c") introduced a bug where the helper functions to take either a 64-bit or compat time[spec|val] got the arguments in the wrong order, passing the kernel stack pointer off as a user pointer (and vice versa). Because of the user address range check, that in turn then causes an EFAULT due to the user pointer range checking failing for the kernel address. Incorrectly resuling in a failed system call for 32-bit processes with a 64-bit kernel. On odder architectures like HP-PA (with separate user/kernel address spaces), it can be used read kernel memory. Signed-off-by: Mikulas Patocka <mpatocka@redhat.com> Cc: stable@vger.kernel.org Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		13 years ago
..
9p	net: Fix (nearly-)kernel-doc comments for various functions	13 years ago
802	tokenring: delete all remaining driver support	13 years ago
8021q	vlan: clean up vlan_dev_hard_start_xmit()	13 years ago
appletalk	net: Fix (nearly-)kernel-doc comments for various functions	13 years ago
atm	atm: fix info leak via getsockname()	13 years ago
ax25	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	13 years ago
batman-adv	batman-adv: Fix mem leak in the batadv_tt_local_event() function	13 years ago
bluetooth	Bluetooth: L2CAP - Fix info leak via getsockname()	13 years ago
bridge	bridge: fix rcu dereference outside of rcu_read_lock	13 years ago
caif	caif: Do not dereference NULL in chnl_recv_cb()	13 years ago
can	can: gw: Remove pointless casts	13 years ago
ceph	libceph: avoid truncation due to racing banners	13 years ago
core	netpoll: revert 6bdb7fe310 and fix be_poll() instead	13 years ago
dcb	net: Fix non-kernel-doc comments with kernel-doc start marker	13 years ago
dccp	dccp: fix info leak via getsockopt(DCCP_SOCKOPT_CCID_TX_INFO)	13 years ago
decnet	ipv4: Restore old dst_free() behavior.	13 years ago
dns_resolver	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	13 years ago
dsa	dsa: Convert compare_ether_addr to ether_addr_equal	13 years ago
ethernet	ipx: move peII functions	13 years ago
ieee802154	6lowpan: Change byte order when storing/accessing to len field	13 years ago
ipv4	Merge branch 'master' of git://1984.lsi.us.es/nf	13 years ago
ipv6	net: ipv6: fix error return code	13 years ago
ipx	ipx: move peII functions	13 years ago
irda	irda: Fix typo in irda	13 years ago
iucv	net: remove skb_orphan_try()	13 years ago
key	net: cleanup unsigned to unsigned int	13 years ago
l2tp	l2tp: avoid to use synchronize_rcu in tunnel free function	13 years ago
lapb	lapb: Neaten debugging	13 years ago
llc	llc: fix info leak via getsockname()	13 years ago
mac80211	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211	13 years ago
mac802154	mac802154: sparse warnings: make symbols static	13 years ago
netfilter	netfilter: nf_conntrack: fix racy timer handling with reliable events	13 years ago
netlabel	…
netlink	netlink: fix possible spoofing from non-root processes	13 years ago
netrom	net: Convert all sysctl registrations to register_net_sysctl	13 years ago
nfc	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem	13 years ago
openvswitch	Revert "openvswitch: potential NULL deref in sample()"	13 years ago
packet	af_packet: match_fanout_group() can be static	13 years ago
phonet	net: remove my future former mail address	13 years ago
rds	rds: set correct msg_namelen	13 years ago
rfkill	rfkill: Add the capability to switch all devices of all type in __rfkill_switch_all().	13 years ago
rose	net: Convert all sysctl registrations to register_net_sysctl	13 years ago
rxrpc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	13 years ago
sched	act_mirred: do not drop packets when fails to mirror it	13 years ago
sctp	netvm: prevent a stream-specific deadlock	13 years ago
sunrpc	svcrpc: fix svc_xprt_enqueue/svc_recv busy-looping	13 years ago
tipc	tipc: remove print_buf and deprecated log buffer code	13 years ago
unix	af_netlink: force credentials passing [CVE-2012-3520]	13 years ago
wanrouter	wanmain: comparing array with NULL	13 years ago
wimax	net: cleanup unsigned to unsigned int	13 years ago
wireless	cfg80211: process pending events when unregistering net device	13 years ago
x25	net: Fix (nearly-)kernel-doc comments for various functions	13 years ago
xfrm	net/xfrm/xfrm_state.c: fix error return code	13 years ago
Kconfig	net: drop NET dependency from HAVE_BPF_JIT	13 years ago
Makefile	econet: remove ancient bug ridden protocol	13 years ago
compat.c	net: Fix references to out-of-scope variables in put_cmsg_compat()	13 years ago
nonet.c	…
socket.c	Fix order of arguments to compat_put_time[spec|val]	13 years ago
sysctl_net.c	net: delete all instances of special processing for token ring	13 years ago