H. Peter Anvin 505bc0f3c1 termios, tty/tty_baudrate.c: fix buffer overrun ... commit 991a251940 upstream. On architectures with CBAUDEX == 0 (Alpha and PowerPC), the code in tty_baudrate.c does not do any limit checking on the tty_baudrate[] array, and in fact a buffer overrun is possible on both architectures. Add a limit check to prevent that situation. This will be followed by a much bigger cleanup/simplification patch. Signed-off-by: H. Peter Anvin (Intel) <hpa@zytor.com> Requested-by: Cc: Johan Hovold <johan@kernel.org> Cc: Jiri Slaby <jslaby@suse.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Richard Henderson <rth@twiddle.net> Cc: Ivan Kokshaysky <ink@jurassic.park.msu.ru> Cc: Matt Turner <mattst88@gmail.com> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: Kate Stewart <kstewart@linuxfoundation.org> Cc: Philippe Ombredanne <pombredanne@nexb.com> Cc: Eugene Syromiatnikov <esyr@redhat.com> Cc: Alan Cox <alan@lxorguk.ukuu.org.uk> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-11-21 09:27:42 +01:00
..
hvc	hvc_opal: don't set tb_ticks_per_usec in udbg_init_opal_common()	2018-08-06 16:24:31 +02:00
ipwireless
serial	sc16is7xx: Fix for multi-channel stall	2018-11-21 09:27:39 +01:00
vt	tty: vt_ioctl: fix potential Spectre v1	2018-09-29 03:08:53 -07:00
amiserial.c
bfin_jtag_comm.c
cyclades.c
ehv_bytechan.c
goldfish.c	Revert "tty: goldfish: Fix a parameter of a call to free_irq"	2017-10-21 17:09:06 +02:00
isicom.c
Kconfig	tty: cyclades: cyz_interrupt is only used for PCI	2018-02-25 11:03:48 +01:00
Makefile
metag_da.c
mips_ejtag_fdc.c
moxa.c
moxa.h
mxser.c
mxser.h
n_gsm.c	tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set	2018-05-02 07:53:40 -07:00
n_hdlc.c
n_r3964.c
n_tracerouter.c
n_tracesink.c
n_tracesink.h
n_tty.c	n_tty: Access echo_* variables carefully.	2018-07-11 16:03:47 +02:00
nozomi.c
pty.c	tty: Fix data race in tty_insert_flip_string_fixed_flag	2018-08-06 16:24:36 +02:00
rocket_int.h
rocket.c	tty: rocket: Fix possible buffer overwrite on register_PCI	2018-09-19 22:48:57 +02:00
rocket.h
synclink_gt.c
synclink.c
synclinkmp.c
sysrq.c	sysrq: Fix warning in sysrq generated crash.	2018-01-17 09:35:28 +01:00
tty_audit.c
tty_buffer.c	tty: fix __tty_insert_flip_char regression	2017-09-27 11:00:13 +02:00
tty_io.c	tty: check name length in tty_find_polling_driver()	2018-11-21 09:27:38 +01:00
tty_ioctl.c	termios, tty/tty_baudrate.c: fix buffer overrun	2018-11-21 09:27:42 +01:00
tty_ldisc.c	tty: Use __GFP_NOFAIL for tty_ldisc_get()	2018-05-02 07:53:41 -07:00
tty_ldsem.c
tty_mutex.c
tty_port.c