Sasha Levin f20f9084ff time: adjtimex: Validate the ADJ_FREQUENCY values ...

commit 5e5aeb4367 upstream.

Verify that the frequency value from userspace is valid and makes sense.

Unverified values can cause overflows later on.

Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Ingo Molnar <mingo@kernel.org>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
[jstultz: Fix up bug for negative values and drop redunent cap check]
Signed-off-by: John Stultz <john.stultz@linaro.org>
[bwh: Backported to 3.2: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

2015-03-06 00:39:19 +00:00

..

debug

kgdb,debug_core: pass the breakpoint struct instead of address and memory

2012-04-13 08:33:48 -07:00

events

perf: Handle compat ioctl

2014-12-14 16:24:01 +00:00

gcov

…

irq

genirq: Prevent proc race against freeing of irq descriptors

2015-02-20 00:49:30 +00:00

power

PM / Sleep: fix recovery during resuming from hibernation

2014-12-14 16:23:52 +00:00

time

time: adjtimex: Validate the ADJ_FREQUENCY values

2015-03-06 00:39:19 +00:00

trace

tracing/syscalls: Ignore numbers outside NR_syscalls' range

2014-12-14 16:23:53 +00:00

.gitignore

…

acct.c

…

async.c

Fix a dead loop in async_synchronize_full()

2012-10-10 03:31:09 +01:00

audit_tree.c

audit: keep inode pinned

2014-12-14 16:23:56 +00:00

audit_watch.c

…

audit.c

audit: use nlmsg_len() to get message payload length

2014-01-03 04:33:17 +00:00

audit.h

…

auditfilter.c

…

auditsc.c

auditsc: audit_krule mask accesses need bounds checking

2014-07-11 13:33:49 +01:00

backtracetest.c

…

bounds.c

…

capability.c

…

cgroup_freezer.c

cgroup: cgroup_subsys->fork() should be called after the task is added to css_set

2013-01-03 03:32:56 +00:00

cgroup.c

move d_rcu from overlapping d_child to overlapping d_alias

2015-01-01 01:27:50 +00:00

compat.c

compat: Fix RT signal mask corruption via sigprocmask

2012-05-31 00:43:51 +01:00

configs.c

…

cpu_pm.c

…

cpu.c

CPU hotplug: provide a generic helper to disable/enable CPU hotplug

2013-06-19 02:16:59 +01:00

cpuset.c

cpuset,mempolicy: fix sleeping function called from invalid context

2014-08-06 18:07:33 +01:00

crash_dump.c

…

cred.c

cred: copy_process() should clear child->replacement_session_keyring

2012-04-13 08:33:50 -07:00

delayacct.c

…

dma.c

…

elfcore.c

…

exec_domain.c

…

exit.c

wait: fix reparent_leader() vs EXIT_DEAD->EXIT_ZOMBIE race

2014-04-30 16:23:26 +01:00

extable.c

…

fork.c

perf: fix perf bug in fork()

2014-11-05 20:27:46 +00:00

freezer.c

…

futex_compat.c

futex: Do not leak robust list to unprivileged process

2012-04-22 15:31:15 -07:00

futex.c

futex: Fix a race condition between REQUEUE_PI and task death

2014-12-14 16:23:51 +00:00

groups.c

…

hrtimer.c

hrtimer: Set expiry time before switch_hrtimer_base()

2014-06-09 13:29:10 +01:00

hung_task.c

hung_task: fix false positive during vfork

2012-01-03 16:14:32 -08:00

irq_work.c

…

itimer.c

…

jump_label.c

jump_label: jump_label_inc may return before the code is patched

2011-12-05 13:28:46 -05:00

kallsyms.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

locking/mutex: Disable optimistic spinning on some architectures

2014-08-06 18:07:38 +01:00

Kconfig.preempt

…

kexec.c

…

kfifo.c

…

kmod.c

usermodehelper: check subprocess_info->path != NULL

2013-05-30 14:35:00 +01:00

kprobes.c

kprobes: return proper error code from register_kprobe()

2012-03-12 12:31:26 -07:00

ksysfs.c

…

kthread.c

…

latencytop.c

…

lockdep_internals.h

…

lockdep_proc.c

…

lockdep_states.h

…

lockdep.c

lockdep, kmemcheck: Annotate ->lock in lockdep_init_map()

2011-12-06 18:18:13 +01:00

Makefile

…

module.c

ftrace/module: Hardcode ftrace_module_init() call into load_module()

2014-06-09 13:29:03 +01:00

mutex-debug.c

…

mutex-debug.h

…

mutex.c

…

mutex.h

…

notifier.c

…

nsproxy.c

…

padata.c

…

panic.c

lockdep, bug: Exclude TAINT_OOT_MODULE from disabling lock debugging

2012-02-13 11:16:59 -08:00

params.c

…

pid_namespace.c

…

pid.c

…

posix-cpu-timers.c

posix-cpu-timers: Fix nanosleep task_struct leak

2013-03-06 03:24:01 +00:00

posix-timers.c

posix-timers: Fix stack info leak in timer_create()

2014-12-14 16:23:51 +00:00

printk.c

printk: Fix scheduling-while-atomic problem in console_cpu_notify()

2014-04-02 00:59:00 +01:00

profile.c

…

ptrace.c

exec/ptrace: fix get_dumpable() incorrect tests

2014-01-03 04:33:21 +00:00

range.c

…

rcu.h

…

rcupdate.c

…

rcutiny_plugin.h

…

rcutiny.c

…

rcutorture.c

…

rcutree_plugin.h

…

rcutree_trace.c

…

rcutree.c

rcu: Fix batch-limit size problem

2013-01-03 03:33:08 +00:00

rcutree.h

…

relay.c

splice: fix racy pipe->buffers uses

2012-07-12 04:31:59 +01:00

res_counter.c

…

resource.c

kernel/resource.c: fix stack overflow in __reserve_region_with_split()

2013-02-20 03:15:31 +00:00

rtmutex_common.h

…

rtmutex-debug.c

…

rtmutex-debug.h

rtmutex: Handle deadlock detection smarter

2014-07-11 13:33:50 +01:00

rtmutex-tester.c

…

rtmutex.c

rtmutex: Plug slow unlock race

2014-07-11 13:33:51 +01:00

rtmutex.h

rtmutex: Handle deadlock detection smarter

2014-07-11 13:33:50 +01:00

rwsem.c

…

sched_autogroup.c

Revert "sched, autogroup: Stop going ahead if autogroup is disabled"

2013-01-03 03:32:53 +00:00

sched_autogroup.h

Revert "sched, autogroup: Stop going ahead if autogroup is disabled"

2013-01-03 03:32:53 +00:00

sched_clock.c

sched_clock: Prevent 64bit inatomicity on 32bit systems

2013-04-25 20:25:34 +01:00

sched_cpupri.c

sched: Use CPUPRI_NR_PRIORITIES instead of MAX_RT_PRIO in cpupri check

2014-06-09 13:29:10 +01:00

sched_cpupri.h

…

sched_debug.c

sched: Fix possible divide by zero in avg_atom() calculation

2014-08-06 18:07:38 +01:00

sched_fair.c

sched: Fix double normalization of vruntime

2014-04-02 00:58:56 +01:00

sched_features.h

…

sched_idletask.c

sched/nohz: Rewrite and fix load-avg computation -- again

2012-07-25 04:11:09 +01:00

sched_rt.c

sched/rt: Reduce rq lock contention by eliminating locking of non-feasible target

2015-03-06 00:39:19 +00:00

sched_stats.h

…

sched_stoptask.c

sched: Fix migration thread runtime bogosity

2012-10-17 03:50:03 +01:00

sched.c

sched: Unthrottle rt runqueues in __disable_runtime()

2014-02-15 19:20:18 +00:00

seccomp.c

…

semaphore.c

…

signal.c

kernel/signal.c: stop info leak via the tkill and the tgkill syscalls

2013-04-25 20:25:42 +01:00

smp.c

smp: Fix SMP function call empty cpu mask race

2013-02-06 04:33:49 +00:00

softirq.c

…

spinlock.c

…

srcu.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

reboot: rigrate shutdown/reboot to boot cpu

2013-06-19 02:17:00 +01:00

sysctl_binary.c

sysctl: fix null checking in bin_dn_node_address()

2013-03-06 03:24:17 +00:00

sysctl_check.c

…

sysctl.c

sysctl: fix write access to dmesg_restrict/kptr_restrict

2012-04-13 08:33:49 -07:00

taskstats.c

…

test_kprobes.c

…

time.c

time: settimeofday: Validate the values of tv from user

2015-02-20 00:49:34 +00:00

timeconst.pl

timeconst.pl: Eliminate Perl warning

2013-03-06 03:23:52 +00:00

timer.c

timer: Prevent overflow in apply_slack

2014-06-09 13:29:04 +01:00

tracepoint.c

tracepoint: Do not waste memory on mods with no tracepoints

2014-06-09 13:28:55 +01:00

tsacct.c

…

uid16.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

wait.c

…

watchdog.c

watchdog: using u64 in get_sample_period()

2012-12-06 11:20:21 +00:00

workqueue_sched.h

…

workqueue.c

workqueue: ensure @task is valid across kthread_stop()

2014-04-02 00:58:54 +01:00