Jakob Koschel f1b2573715 vt_ioctl: add array_index_nospec to VT_ACTIVATE ... commit 28cb138f55 upstream. in vt_setactivate an almost identical code path has been patched with array_index_nospec. In the VT_ACTIVATE path the user input is from a system call argument instead of a usercopy. For consistency both code paths should have the same mitigations applied. Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam. Co-developed-by: Brian Johannesmeyer <bjohannesmeyer@gmail.com> Signed-off-by: Brian Johannesmeyer <bjohannesmeyer@gmail.com> Signed-off-by: Jakob Koschel <jakobkoschel@gmail.com> Link: https://lore.kernel.org/r/20220127144406.3589293-2-jakobkoschel@gmail.com Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-02-16 12:54:27 +01:00
..
.gitignore	tty: vt: move conmakehash to drivers/tty/vt/ from scripts/	2019-12-17 14:42:46 +01:00
conmakehash.c	tty: vt: move conmakehash to drivers/tty/vt/ from scripts/	2019-12-17 14:42:46 +01:00
consolemap.c	vt/consolemap: do font sum unsigned	2021-03-07 12:34:09 +01:00
cp437.uni	tty: fix up a few remaining files without SPDX identifiers	2019-04-04 18:48:43 +02:00
defkeymap.c_shipped	tty: fix up a few remaining files without SPDX identifiers	2019-04-04 18:48:43 +02:00
defkeymap.map	tty: fix up a few remaining files without SPDX identifiers	2019-04-04 18:48:43 +02:00
keyboard.c	vt: keyboard, extend func_buf_lock to readers	2020-10-28 13:41:02 +01:00
Makefile	kbuild: rename hostprogs-y/always to hostprogs/always-y	2020-02-04 01:53:07 +09:00
selection.c	vc: propagate "viewed as bool" from screenpos up	2020-08-18 13:45:20 +02:00
vc_screen.c	Revert "vc_screen: extract vcs_read_buf_header"	2020-08-24 19:51:56 +02:00
vt_ioctl.c	vt_ioctl: add array_index_nospec to VT_ACTIVATE	2022-02-16 12:54:27 +01:00
vt.c	tty: Fix out-of-bound vmalloc access in imageblit	2021-10-06 15:55:45 +02:00