Received: by 10.223.176.5 with SMTP id f5csp1116918wra; Wed, 31 Jan 2018 01:23:40 -0800 (PST) X-Google-Smtp-Source: AH8x2252638mgYx61DBek/fg2WOMA2tlQAs3VKnJelRL0oWAO7LiLrfztZtQG2eudCLWvrNNGIK4 X-Received: by 2002:a17:902:a612:: with SMTP id u18-v6mr8153365plq.129.1517390620510; Wed, 31 Jan 2018 01:23:40 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1517390620; cv=none; d=google.com; s=arc-20160816; b=DyImpvqfhMQbnXM61DXqqxs9XlV6ZBw2oFHLaN0jJXDU1qD6Z7d0Ymb1+cVgDer96Y 8sj6Hb21sLL43SZLmOkSWpoyDbweYBsD3FTnHT9DR6EzzREdUExLsqt9DTFaIAso1Xpk sp9R3bjXr0rY+owRAmz0XucAc9AEaQ97Bo/fHVy4bFXWD1FEt+GKh/aPH6Lt8YsOZ5DY NTRgLEUCZC2coYI3L4wRrxaYRS8q2v/RLyRHemYWH+iN0V8KoHu/bwWKHMz1ozpxHW0c 7JwCc8Ls3wmWNJ8y0LUA09jaXO1jgI+bdHceQZUJaEKxl38I4Ng/R/C4SX4UsMtvL7pK 3yFg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :references:in-reply-to:mime-version:dkim-signature :arc-authentication-results; bh=aqjmpu2MuQYB9qNS+3v9NSGh2LO2m9TFQpWJHle7omQ=; b=DbMVAgUy5iNpbXoTEx571FBAt9kdbL643mXH9fq8zaCcVd7okuNHpKlJqs0EkD+SW5 Vo1A/v55EC3AUw1EASSZ74qixW/K7MNz1rkXVbc/oTQPooMZTD4TDZ0S4bCTigwT3wPB zreCHZj7j1WQMZbAhzpGFvzS5DgJwUs3Ug8jtS8/CZ18ktg9sNY8Dwomv99i6OtWfNgX /hY4lCzWHKuGmmiwVM9GhGdHHadjlWRtG+ebiYvKaEd2pmfqyQQLdfGoeyB7SqCuNknh 6dFYpfERNFg4d3FtEc+9XFM3Nt9BtyJd/oPvSsF0O40GHmSne0qRtN37A94BwCGDJtWo oktg== ARC-Authentication-Results: i=1; mx.google.com; dkim=fail header.i=@gmail.com header.s=20161025 header.b=XsuZH5sp; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id c1si4025438pge.118.2018.01.31.01.23.25; Wed, 31 Jan 2018 01:23:40 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=fail header.i=@gmail.com header.s=20161025 header.b=XsuZH5sp; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752923AbeAaIdt (ORCPT + 99 others); Wed, 31 Jan 2018 03:33:49 -0500 Received: from mail-ua0-f193.google.com ([209.85.217.193]:39541 "EHLO mail-ua0-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752366AbeAaIdn (ORCPT ); Wed, 31 Jan 2018 03:33:43 -0500 Received: by mail-ua0-f193.google.com with SMTP id e18so8906151ual.6; Wed, 31 Jan 2018 00:33:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=aqjmpu2MuQYB9qNS+3v9NSGh2LO2m9TFQpWJHle7omQ=; b=XsuZH5spYPM/cKP/6m0ZHjqK+KoSdeZTYoZghY8RycjGbQK8/a+zxIH2ysGnXP4L7m 1HEg6fw6hhvxzwOscAC/T3tuJavtqfqrK/H4QhzbVbb48hR24oqzLxkMWvkSAng+s4EV X5J/xybu6gvUTV3XGMq5nH2uf40MQasCNPjV+LvBWGNKJ2D1hORO4EdXrGjBry0SkAls 8PuUQv+p4xR+ovcSjCKcQfhRjb6pVkyiJOJyy4DgrDATCJNat9IH6TMpDidrzfvkpXau LdqVOSKnoBOOcX8RUJcB7xbdBr+0ldwg+lawyzgFRDvn3EW+/U0HMdS/o08l7bbDx91H Hoxw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=aqjmpu2MuQYB9qNS+3v9NSGh2LO2m9TFQpWJHle7omQ=; b=auZ7Rf0ZJQSrg8o4R1ZBB2wELJNAyHpgpoPMV++OgE5PV+/9Tyw/FkEAbBlly0c+Zv mqza1330XFHAEWUpL00gOehoDdYQiDTgmfX4xY/ISN4XLmP7Ri03/phSlme5R4LQAJVn wkJo5lvNNtE4AJRmEIbUDm/yvedb8dJgq7SSbSDcb2V0QhjTP94i0J6Q/HWEsugM0kGE 42eX3kmjoge5tP7D7cNbzfL46/FxFr4EZIEy5oHr/V6IN6PQD1L4ZzlmSiWsDsoji09E qyd/AAmNA14K13t7U3ejoM6FBc9hjQKQdFrAZss7OalmfEZV+YPp1SPWd1QRK/a2mAjV kSqg== X-Gm-Message-State: AKwxytc46rrVmbNmpq4OT/ZL2i6aSUOHkU0q4XlTrNHO7RhVG54oDn/W gJLrCN0wKTzostxsEDbN5hDE5Zgb++0QhM+cyDtmDQ== X-Received: by 10.176.94.78 with SMTP id a14mr24331082uah.17.1517387622071; Wed, 31 Jan 2018 00:33:42 -0800 (PST) MIME-Version: 1.0 Received: by 10.176.78.22 with HTTP; Wed, 31 Jan 2018 00:33:21 -0800 (PST) In-Reply-To: <20180130203042.4797-1-peter.malone@gmail.com> References: <20180130203042.4797-1-peter.malone@gmail.com> From: Mathieu Malaterre Date: Wed, 31 Jan 2018 09:33:21 +0100 X-Google-Sender-Auth: aJR5vf8MEtv5KLw921F6aTbSZu8 Message-ID: Subject: Re: [PATCH] Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in sbusfb_ioctl_helper(). To: Peter Malone Cc: Linux Fbdev development list , linux-kernel@vger.kernel.org Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Peter, On Tue, Jan 30, 2018 at 9:30 PM, Peter Malone wrote: > Signed-off-by: Peter Malone AFAIK empty commit message is not acceptable upstream > drivers/video/fbdev/sbuslib.c | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/drivers/video/fbdev/sbuslib.c b/drivers/video/fbdev/sbuslib.c > index af6fc97f4ba4..a436d44f1b7f 100644 > --- a/drivers/video/fbdev/sbuslib.c > +++ b/drivers/video/fbdev/sbuslib.c > @@ -122,7 +122,7 @@ int sbusfb_ioctl_helper(unsigned long cmd, unsigned long arg, > unsigned char __user *ured; > unsigned char __user *ugreen; > unsigned char __user *ublue; > - int index, count, i; > + unsigned int index, count, i; > > if (get_user(index, &c->index) || > __get_user(count, &c->count) || > @@ -161,7 +161,7 @@ int sbusfb_ioctl_helper(unsigned long cmd, unsigned long arg, > unsigned char __user *ugreen; > unsigned char __user *ublue; > struct fb_cmap *cmap = &info->cmap; > - int index, count, i; > + unsigned int index, count, i; > u8 red, green, blue; > > if (get_user(index, &c->index) || > -- > 2.14.3 > > -- > To unsubscribe from this list: send the line "unsubscribe linux-fbdev" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html