Matthew Daley 3f21ccce8d floppy: don't write kernel-only members to FDRAWCMD ioctl output ...

CVE-2014-1738

commit 2145e15e0557a01b9195d1c7199a1b92cb9be81f upstream.

Do not leak kernel-only floppy_raw_cmd structure members to userspace.
This includes the linked-list pointer and the pointer to the allocated
DMA space.

Signed-off-by: Matthew Daley <mattd@bugfuzz.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>

2014-06-27 07:58:39 -06:00

..

aoe

…

drbd

…

mtip32xx

…

paride

…

xen-blkback

…

amiflop.c

…

ataflop.c

…

brd.c

…

cciss_cmd.h

…

cciss_scsi.c

…

cciss_scsi.h

…

cciss.c

…

cciss.h

…

cpqarray.c

…

cpqarray.h

…

cryptoloop.c

…

DAC960.c

…

DAC960.h

…

floppy.c

…

hd.c

…

ida_cmd.h

…

ida_ioctl.h

…

Kconfig

…

loop.c

…

Makefile

…

mg_disk.c

…

nbd.c

…

nvme.c

…

osdblk.c

…

pktcdvd.c

…

ps3disk.c

…

ps3vram.c

…

rbd_types.h

…

rbd.c

…

smart1,2.h

…

sunvdc.c

…

swim3.c

…

swim_asm.S

…

swim.c

…

sx8.c

…

ub.c

…

umem.c

…

umem.h

…

virtio_blk.c

…

xd.c

…

xd.h

…

xen-blkfront.c

…

xsysace.c

…

z2ram.c

…