Kees Cook 2a27f61bd4 mac: validate mac_partition is within sector ...

commit 02e2a5bfeb upstream.

If md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single
512 byte sector would be read (secsize / 512). However the partition
structure would be located past the end of the buffer (secsize % 512).

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Jens Axboe <axboe@fb.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-03-03 15:06:21 -08:00

..

partitions

mac: validate mac_partition is within sector

2016-03-03 15:06:21 -08:00

blk-cgroup.c

blkcg: fix gendisk reference leak in blkg_conf_prep()

2015-08-10 12:20:30 -07:00

blk-cgroup.h

Update of blkg_stat and blkg_rwstat may happen in bh context. While u64_stats_fetch_retry is only preempt_disable on 32bit UP system. This is not enough to avoid preemption by bh and may read strange 64 bit value.

2013-12-11 22:36:27 -08:00

blk-core.c

SCSI: Fix NULL pointer dereference in runtime PM

2016-02-25 11:57:47 -08:00

blk-exec.c

…

blk-flush.c

…

blk-integrity.c

…

blk-ioc.c

…

blk-iopoll.c

…

blk-lib.c

block: add cond_resched() to potentially long running ioctl discard loop

2014-02-22 12:41:28 -08:00

blk-map.c

…

blk-merge.c

…

blk-settings.c

block: fix alignment_offset math that assumes io_min is a power-of-2

2014-11-14 08:47:55 -08:00

blk-softirq.c

…

blk-sysfs.c

…

blk-tag.c

block: don't assume last put of shared tags is for the host

2014-07-31 12:53:48 -07:00

blk-throttle.c

blk-throttle: check stats_cpu before reading it from sysfs

2015-03-06 14:40:54 -08:00

blk-timeout.c

…

blk.h

block: __elv_next_request() shouldn't call into the elevator if bypassing

2014-02-22 12:41:28 -08:00

bsg-lib.c

…

bsg.c

…

cfq-iosched.c

cfq-iosched: fix incorrect filing of rt async cfqq

2015-03-06 14:40:50 -08:00

compat_ioctl.c

block: provide compat ioctl for BLKZEROOUT

2014-07-31 12:53:48 -07:00

deadline-iosched.c

…

elevator.c

elevator: acquire q->sysfs_lock in elevator_change()

2013-12-08 07:29:27 -08:00

genhd.c

block: fix ext_dev_lock lockdep report

2015-06-22 16:55:52 -07:00

ioctl.c

…

Kconfig

…

Kconfig.iosched

…

Makefile

…

noop-iosched.c

…

partition-generic.c

block: Fix dev_t minor allocation lifetime

2014-10-05 14:54:12 -07:00

scsi_ioctl.c

scsi: Fix error handling in SCSI_IOCTL_SEND_COMMAND

2014-11-14 08:47:59 -08:00