Jens Axboe 8811930dc7 splice: missing user pointer access verification
vmsplice_to_user() must always check the user pointer and length
with access_ok() before copying. Likewise, for the slow path of
copy_from_user_mmap_sem() we need to check that we may read from
the user region.

Signed-off-by: Jens Axboe <jens.axboe@oracle.com>
Cc: Wojciech Purczynski <cliph@research.coseinc.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-02-08 09:25:01 -08:00
..
2008-02-08 09:22:39 -08:00
2008-02-08 09:22:39 -08:00
2008-02-08 09:22:39 -08:00
2008-02-08 09:22:40 -08:00
2008-02-08 09:22:39 -08:00
2008-02-08 09:22:40 -08:00
2008-02-08 09:22:40 -08:00
2007-10-22 08:13:21 -07:00
2008-02-08 09:22:40 -08:00
2008-02-08 09:22:40 -08:00
2008-02-08 09:22:40 -08:00
2008-02-07 08:42:27 -08:00
2008-02-08 09:22:40 -08:00
2008-02-08 09:22:40 -08:00
2008-02-08 09:22:40 -08:00
2008-02-08 09:22:40 -08:00
2008-02-08 09:22:40 -08:00
2007-10-18 14:37:31 -07:00
2008-02-08 09:22:40 -08:00
2008-02-08 09:22:41 -08:00
2008-01-30 13:31:46 +01:00
2008-02-08 02:09:56 +00:00
2008-02-06 10:41:07 -08:00
2007-07-29 17:09:29 -07:00
2008-02-05 09:44:07 -08:00
2008-02-08 09:22:34 -08:00
2008-02-06 10:41:07 -08:00
2008-01-30 13:31:46 +01:00
2007-07-19 10:04:45 -07:00
2008-02-06 10:41:02 -08:00
2008-02-05 09:44:07 -08:00