linux

mirror of https://github.com/raspberrypi/linux.git synced 2025-12-07 02:19:54 +00:00

Files

Al Viro c81fc59be4 gadgetfs: use-after-free in ->aio_read()

[ Upstream commit f01d35a15f ]

AIO_PREAD requests call ->aio_read() with iovec on caller's stack, so if
we are going to access it asynchronously, we'd better get ourselves
a copy - the one on kernel stack of aio_run_iocb() won't be there
anymore.  function/f_fs.c take care of doing that, legacy/inode.c
doesn't...

Cc: stable@vger.kernel.org
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>

2015-03-28 10:01:39 -04:00

function

usb: gadget: function: Fixed the return value on error path

2014-10-23 14:49:35 -05:00

legacy

gadgetfs: use-after-free in ->aio_read()

2015-03-28 10:01:39 -04:00

udc

usb: gadget: udc: atmel: fix possible oops when unloading module

2015-01-27 08:29:43 -08:00

composite.c

usb: gadget: composite: enable BESL support