Adrian Salido 4617f564c0 dm ioctl: prevent stack leak in dm ioctl call ...

When calling a dm ioctl that doesn't process any data
(IOCTL_FLAGS_NO_PARAMS), the contents of the data field in struct
dm_ioctl are left initialized.  Current code is incorrectly extending
the size of data copied back to user, causing the contents of kernel
stack to be leaked to user.  Fix by only copying contents before data
and allow the functions processing the ioctl to override.

Cc: stable@vger.kernel.org
Signed-off-by: Adrian Salido <salidoa@google.com>
Reviewed-by: Alasdair G Kergon <agk@redhat.com>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>

2017-04-27 13:55:13 -04:00

..

bcache

sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h> in <linux/sched.h>

2017-03-02 08:42:38 +01:00

persistent-data

dm btree: fix for dm_btree_find_lowest_key()

2017-04-24 14:47:49 -04:00

bitmap.c

md: separate flags for superblock changes

2016-12-08 22:01:47 -08:00

bitmap.h

md-cluster: sync bitmap when node received RESYNCING msg

2016-05-04 12:39:35 -07:00

dm-bio-prison-v1.c

dm bio prison v2: new interface for the bio prison

2017-03-07 11:30:16 -05:00

dm-bio-prison-v1.h

dm bio prison v2: new interface for the bio prison

2017-03-07 11:30:16 -05:00

dm-bio-prison-v2.c

dm bio prison v2: new interface for the bio prison

2017-03-07 11:30:16 -05:00

dm-bio-prison-v2.h

dm bio prison v2: new interface for the bio prison

2017-03-07 11:30:16 -05:00

dm-bio-record.h

…

dm-bufio.c

dm bufio: add sector start offset to dm-bufio interface

2017-03-07 13:28:33 -05:00

dm-bufio.h

dm bufio: add sector start offset to dm-bufio interface

2017-03-07 13:28:33 -05:00

dm-builtin.c

dm: move request-based code out to dm-rq.[hc]

2016-06-10 15:15:44 -04:00

dm-cache-background-tracker.c

dm cache: significant rework to leverage dm-bio-prison-v2

2017-03-07 13:28:31 -05:00

dm-cache-background-tracker.h

dm cache: significant rework to leverage dm-bio-prison-v2

2017-03-07 13:28:31 -05:00

dm-cache-block-types.h

linux: drop __bitwise__ everywhere

2016-12-16 00:13:41 +02:00

dm-cache-metadata.c

dm cache metadata: use cursor api in blocks_are_clean_separate_dirty()

2017-02-16 13:12:51 -05:00

dm-cache-metadata.h

dm cache: significant rework to leverage dm-bio-prison-v2

2017-03-07 13:28:31 -05:00

dm-cache-policy-internal.h

dm cache: significant rework to leverage dm-bio-prison-v2

2017-03-07 13:28:31 -05:00

dm-cache-policy-smq.c

dm cache policy smq: make the cleaner policy write-back more aggressively

2017-03-31 11:41:05 -04:00

dm-cache-policy.c

…

dm-cache-policy.h

dm cache: significant rework to leverage dm-bio-prison-v2

2017-03-07 13:28:31 -05:00

dm-cache-target.c

dm cache: set/clear the cache core's dirty_bitset when loading mappings

2017-03-31 11:33:44 -04:00

dm-core.h

dm: always defer request allocation to the owner of the request_queue

2017-01-27 15:08:35 -07:00

dm-crypt.c

dm crypt: replace custom implementation of hex2bin()

2017-04-27 12:08:31 -04:00

dm-delay.c

dm: mark targets that pass integrity data

2017-04-24 12:04:32 -04:00

dm-era-target.c

dm era: save spacemap metadata root after the pre-commit

2017-04-24 15:02:14 -04:00

dm-exception-store.c

- Revert a dm-multipath change that caused a regression for unprivledged

2015-11-04 21:19:53 -08:00

dm-exception-store.h

dm snapshot: fix hung bios when copy error occurs

2016-01-08 20:03:05 -05:00

dm-flakey.c

dm flakey: introduce "error_writes" feature

2016-12-13 15:01:31 -05:00

dm-integrity.c

dm integrity: use previously calculated log2 of sectors_per_block

2017-04-27 12:16:32 -04:00

dm-io.c

dm io: use bvec iterator helpers to implement .get_page and .next_page

2016-11-21 09:51:57 -05:00

dm-ioctl.c

dm ioctl: prevent stack leak in dm ioctl call

2017-04-27 13:55:13 -04:00

dm-kcopyd.c

dm: move request-based code out to dm-rq.[hc]

2016-06-10 15:15:44 -04:00

dm-linear.c

dm: mark targets that pass integrity data

2017-04-24 12:04:32 -04:00

dm-log-userspace-base.c

dm: drop NULL test before kmem_cache_destroy() and mempool_destroy()

2015-10-31 19:06:00 -04:00

dm-log-userspace-transfer.c

dm log userspace transfer: match wait_for_completion_timeout return type

2015-04-15 12:10:20 -04:00

dm-log-userspace-transfer.h

…

dm-log-writes.c

Merge branch 'for-4.9/block' of git://git.kernel.dk/linux-block

2016-10-07 14:42:05 -07:00

dm-log.c

block,fs: use REQ_* flags directly

2016-11-01 09:43:26 -06:00

dm-mpath.c

dm mpath: requeue after a small delay if blk_get_request() fails

2017-04-24 15:06:19 -04:00

dm-mpath.h

…

dm-path-selector.c

…

dm-path-selector.h

dm path selector: remove 'repeat_count' return from .select_path hook

2016-02-22 22:34:42 -05:00

dm-queue-length.c

dm path selector: remove 'repeat_count' return from .select_path hook

2016-02-22 22:34:42 -05:00

dm-raid1.c

Merge branch 'for-4.10/block' of git://git.kernel.dk/linux-block

2016-12-13 10:19:16 -08:00

dm-raid.c

dm raid: add raid4/5/6 journal write-back support via journal_mode option

2017-03-27 12:08:07 -04:00

dm-region-hash.c

block: rename bio bi_rw to bi_opf

2016-08-07 14:41:02 -06:00

dm-round-robin.c

dm round robin: revert "use percpu 'repeat_count' and 'current_path'"

2017-02-17 00:54:09 -05:00

dm-rq.c

dm mpath: requeue after a small delay if blk_get_request() fails

2017-04-24 15:06:19 -04:00

dm-rq.h

dm: always defer request allocation to the owner of the request_queue

2017-01-27 15:08:35 -07:00

dm-service-time.c

dm path selector: remove 'repeat_count' return from .select_path hook

2016-02-22 22:34:42 -05:00

dm-snap-persistent.c

block,fs: use REQ_* flags directly

2016-11-01 09:43:26 -06:00

dm-snap-transient.c

dm snapshot: fix hung bios when copy error occurs

2016-01-08 20:03:05 -05:00

dm-snap.c

block: rename bio bi_rw to bi_opf

2016-08-07 14:41:02 -06:00

dm-stats.c

dm stats: fix a leaked s->histogram_boundaries array

2017-02-16 14:17:07 -05:00

dm-stats.h

dm stats: support precise timestamps

2015-06-17 12:40:40 -04:00

dm-stripe.c

dm: mark targets that pass integrity data

2017-04-24 12:04:32 -04:00

dm-switch.c

dm switch: simplify conditional in alloc_region_table()

2015-10-31 19:06:06 -04:00

dm-sysfs.c

dm: move request-based code out to dm-rq.[hc]

2016-06-10 15:15:44 -04:00

dm-table.c

dm: mark targets that pass integrity data

2017-04-24 12:04:32 -04:00

dm-target.c

dm: always defer request allocation to the owner of the request_queue

2017-01-27 15:08:35 -07:00

dm-thin-metadata.c

dm thin: fix a race condition between discarding and provisioning a block

2016-07-20 12:43:35 -04:00

dm-thin-metadata.h

dm thin: fix a race condition between discarding and provisioning a block

2016-07-20 12:43:35 -04:00

dm-thin.c

dm thin: fix a memory leak when passing discard bio down

2017-04-24 14:58:10 -04:00

dm-uevent.c

…

dm-uevent.h

…

dm-verity-fec.c

dm verity: switch to using asynchronous hash crypto API

2017-04-24 15:37:04 -04:00

dm-verity-fec.h

dm verity: add support for forward error correction

2015-12-10 10:39:03 -05:00

dm-verity-target.c

dm verity: switch to using asynchronous hash crypto API

2017-04-24 15:37:04 -04:00

dm-verity.h

dm verity: switch to using asynchronous hash crypto API

2017-04-24 15:37:04 -04:00

dm-zero.c

block: rename bio bi_rw to bi_opf

2016-08-07 14:41:02 -06:00

dm.c

dm: mark targets that pass integrity data

2017-04-24 12:04:32 -04:00

dm.h

dm: always defer request allocation to the owner of the request_queue

2017-01-27 15:08:35 -07:00

faulty.c

md: fast clone bio in bio_clone_mddev()

2017-02-15 11:24:54 -08:00

Kconfig

dm raid: select the Kconfig option CONFIG_MD_RAID0

2017-03-30 11:17:08 -04:00

linear.c

Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/shli/md

2017-02-24 14:42:19 -08:00

linear.h

md linear: fix a race between linear_add() and linear_congested()

2017-02-13 09:17:50 -08:00

Makefile

dm: add integrity target

2017-03-24 15:49:07 -04:00

md-cluster.c

md-cluster: make resync lock also could be interruptted

2016-09-21 09:09:44 -07:00

md-cluster.h

md-cluster: gather resync infos and enable recv_thread after bitmap is ready

2016-05-09 09:24:03 -07:00

md.c

sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h>

2017-03-02 08:42:29 +01:00

md.h

md: fast clone bio in bio_clone_mddev()

2017-02-15 11:24:54 -08:00

multipath.c

Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/shli/md

2017-02-24 14:42:19 -08:00

multipath.h

…

raid0.c

Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/shli/md

2017-02-24 14:42:19 -08:00

raid0.h

block: kill merge_bvec_fn() completely

2015-08-13 12:31:57 -06:00

raid1.c

sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h>

2017-03-02 08:42:29 +01:00

raid1.h

RAID1: avoid unnecessary spin locks in I/O barrier code

2017-02-19 22:04:25 -08:00

raid5-cache.c

md: add raid4/5/6 journal mode switching API

2017-03-27 11:13:47 -04:00

raid5.c

sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h>

2017-03-02 08:42:29 +01:00

raid5.h

md: add raid4/5/6 journal mode switching API

2017-03-27 11:13:47 -04:00

raid10.c

Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/shli/md

2017-02-24 14:42:19 -08:00

raid10.h

md/raid10: add failfast handling for reads.

2016-11-22 09:14:28 -08:00