Kees Cook a8139b5b8b block: do not pass disk names as format strings ... commit ffc8b30866 upstream. Disk names may contain arbitrary strings, so they must not be interpreted as format strings. It seems that only md allows arbitrary strings to be used for disk names, but this could allow for a local memory corruption from uid 0 into ring 0. CVE-2013-2851 Signed-off-by: Kees Cook <keescook@chromium.org> Cc: Jens Axboe <axboe@kernel.dk> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2013-07-13 11:03:41 -07:00
..
aoe	aoe: reserve enough headroom on skbs	2013-04-05 10:04:40 -07:00
drbd	drbd: fix for deadlock when using automatic split-brain-recovery	2013-05-19 10:54:48 -07:00
mtip32xx	mtip32xx: release the semaphore on an error path	2012-05-11 16:42:14 +02:00
paride	paride/pcd: fix bool verbose module parameter.	2012-01-13 09:32:26 +10:30
xen-blkback	Revert "xen/blkback: Don't trust the handle from the frontend."	2013-04-05 10:04:52 -07:00
amiflop.c	fs: move code out of buffer.c	2012-01-03 22:54:07 -05:00
ataflop.c	block: unexport DISK_EVENT_MEDIA_CHANGE for legacy/fringe drivers	2011-04-21 21:33:05 +02:00
brd.c	drivers/block/brd.c: fix brd_lookup_page() race	2013-06-07 12:49:26 -07:00
cciss_cmd.h	cciss: use new doorbell-bit-5 reset method	2011-05-06 08:23:55 -06:00
cciss_scsi.c	cciss: fix handling of protocol error	2012-10-02 10:29:50 -07:00
cciss_scsi.h	cciss: add cciss_tape_cmds module paramter	2011-05-06 08:23:59 -06:00
cciss.c	cciss: fix broken mutex usage in ioctl	2013-06-20 11:58:45 -07:00
cciss.h	cciss: Adds simple mode functionality	2011-08-08 11:40:15 +02:00
cpqarray.c	drivers/block/cpqarray.c: use pci_dev->revision	2011-09-21 10:02:13 +02:00
cpqarray.h
cryptoloop.c
DAC960.c	dac960: Remove unused variables from DAC960_CreateProcEntries()	2012-05-11 16:42:14 +02:00
DAC960.h
floppy.c	floppy: do put_disk on current dr if blk_init_queue fails	2012-11-05 09:50:41 +01:00
hd.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
ida_cmd.h
ida_ioctl.h
Kconfig	usb/ub: deprecate & schedule for removal the "Low Performance USB Block" driver	2012-03-16 13:30:10 -07:00
loop.c	loop: prevent bdev freeing while device in use	2013-04-05 10:04:35 -07:00
Makefile	Merge git://git.infradead.org/users/willy/linux-nvme	2012-01-18 12:34:09 -08:00
mg_disk.c
nbd.c	block: do not pass disk names as format strings	2013-07-13 11:03:41 -07:00
nvme.c	NVMe: Fix uninitialized iod compiler warning	2012-12-03 11:46:36 -08:00
osdblk.c
pktcdvd.c	block: remove the second argument of k[un]map_atomic()	2012-03-20 21:48:16 +08:00
ps3disk.c	block: Fix files that are modules and hence need module.h	2011-10-31 19:31:13 -04:00
ps3vram.c	Merge branch 'modsplit-Oct31_2011' of git://git.kernel.org/pub/scm/linux/kernel/git/paulg/linux	2011-11-06 19:44:47 -08:00
rbd_types.h	rbd: small changes	2012-03-22 10:47:50 -05:00
rbd.c	rbd: do not allow remove of mounted-on image	2013-01-17 08:51:21 -08:00
smart1,2.h	fix typos 'comamnd' -> 'command' in comments	2011-02-02 11:31:21 +01:00
sunvdc.c	sunvdc: Fix off-by-one in generic_request().	2013-02-28 06:59:02 -08:00
swim_asm.S
swim.c	m68k/mac: cleanup forward declarations	2011-12-10 19:52:46 +01:00
swim3.c	block/swim3: Locking fixes	2011-12-12 12:42:12 +01:00
sx8.c	block, sx8: fix pointer math issue getting fw version	2012-03-03 19:44:39 +01:00
ub.c	usb/ub: deprecate & schedule for removal the "Low Performance USB Block" driver	2012-03-16 13:30:10 -07:00
umem.c	umem: fix up unplugging	2012-07-16 09:04:08 -07:00
umem.h
virtio_blk.c	virtio: fixes on top of 3.4-rc2	2012-04-16 18:34:12 -07:00
xd.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
xd.h
xen-blkfront.c	Merge branch 'for-3.4/drivers' of git://git.kernel.dk/linux-block	2012-04-13 18:45:13 -07:00
xsysace.c	block: xsysace: Don't use NO_IRQ	2012-01-05 08:34:29 +01:00
z2ram.c	drivers/block/z2ram.c: correct printing of sector_t	2010-10-28 06:15:26 -06:00