iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/md
History
Mikulas Patocka 4edbe1d7bc dm ioctl: fix out of bounds array access when no devices 
If there are not any dm devices, we need to zero the "dev" argument in
the first structure dm_name_list. However, this can cause out of
bounds write, because the "needed" variable is zero and len may be
less than eight.

Fix this bug by reporting DM_BUFFER_FULL_FLAG if the result buffer is
too small to hold the "nl->dev" value.

Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable@vger.kernel.org
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
2021-03-26 14:51:50 -04:00
..
bcache
block: rename BIO_MAX_PAGES to BIO_MAX_VECS
2021-03-11 07:47:48 -07:00
persistent-data
dm persistent data: fix return type of shadow_root()
2021-02-03 10:10:05 -05:00
dm-bio-prison-v1.c
dm bio prison: replace spin_lock_irqsave with spin_lock_irq
2019-11-05 14:53:03 -05:00
dm-bio-prison-v1.h
…
dm-bio-prison-v2.c
dm bio prison v2: use true/false for bool variable
2020-01-07 12:07:08 -05:00
dm-bio-prison-v2.h
…
dm-bio-record.h
block: store a block_device pointer in struct bio
2021-01-24 18:17:20 -07:00
dm-bufio.c
dm bufio: subtract the number of initial sectors in dm_bufio_get_device_size
2021-03-04 14:53:54 -05:00
dm-builtin.c
…
dm-cache-background-tracker.c
…
dm-cache-background-tracker.h
…
dm-cache-block-types.h
…
dm-cache-metadata.c
dm: use bdev_read_only to check if a device is read-only
2021-01-24 18:15:57 -07:00
dm-cache-metadata.h
…
dm-cache-policy-internal.h
…
dm-cache-policy-smq.c
…
dm-cache-policy.c
…
dm-cache-policy.h
…
dm-cache-target.c
dm cache: simplify the return expression of load_mapping()
2020-12-22 09:54:48 -05:00
dm-clone-metadata.c
dm clone metadata: Fix return type of dm_clone_nr_of_hydrated_regions()
2020-03-27 14:42:51 -04:00
dm-clone-metadata.h
dm clone metadata: Fix return type of dm_clone_nr_of_hydrated_regions()
2020-03-27 14:42:51 -04:00
dm-clone-target.c
dm-clone: use blkdev_issue_flush in commit_metadata
2021-01-27 09:51:48 -07:00
dm-core.h
dm: fix deadlock when swapping to encrypted device
2021-02-11 09:45:28 -05:00
dm-crypt.c
block: rename BIO_MAX_PAGES to BIO_MAX_VECS
2021-03-11 07:47:48 -07:00
dm-delay.c
block: rename generic_make_request to submit_bio_noacct
2020-07-01 07:27:24 -06:00
dm-dust.c
dm dust: remove h from printk format specifier
2021-02-03 10:10:04 -05:00
dm-ebs-target.c
dm ebs: avoid double unlikely() notation when using IS_ERR()
2020-12-21 13:59:37 -05:00
dm-era-target.c
dm era: only resize metadata in preresume
2021-02-11 09:45:22 -05:00
dm-exception-store.c
…
dm-exception-store.h
…
dm-flakey.c
dm: simplify target code conditional on CONFIG_BLK_DEV_ZONED
2021-02-11 09:45:27 -05:00
dm-init.c
dm init: Set file local variable static
2020-08-04 15:51:28 -04:00
dm-integrity.c
dm integrity: introduce the "fix_hmac" argument
2021-02-03 10:10:05 -05:00
dm-io.c
block: Add bio_max_segs
2021-02-26 15:49:51 -07:00
dm-ioctl.c
dm ioctl: fix out of bounds array access when no devices
2021-03-26 14:51:50 -04:00
dm-kcopyd.c
dm kcopyd: always complete failed jobs
2019-08-15 15:57:39 -04:00
dm-linear.c
dm: simplify target code conditional on CONFIG_BLK_DEV_ZONED
2021-02-11 09:45:27 -05:00
dm-log-userspace-base.c
…
dm-log-userspace-transfer.c
…
dm-log-userspace-transfer.h
…
dm-log-writes.c
block: Add bio_max_segs
2021-02-26 15:49:51 -07:00
dm-log.c
…
dm-mpath.c
dm: use dm_table_get_device_name() where appropriate in targets
2020-09-29 16:33:08 -04:00
dm-mpath.h
…
dm-path-selector.c
…
dm-path-selector.h
dm mpath: pass IO start time to path selector
2020-05-15 10:29:36 -04:00
dm-ps-historical-service-time.c
dm: rename multipath path selector source files to have "dm-ps" prefix
2020-12-04 18:04:35 -05:00
dm-ps-io-affinity.c
dm: rename multipath path selector source files to have "dm-ps" prefix
2020-12-04 18:04:35 -05:00
dm-ps-queue-length.c
dm: rename multipath path selector source files to have "dm-ps" prefix
2020-12-04 18:04:35 -05:00
dm-ps-round-robin.c
dm: rename multipath path selector source files to have "dm-ps" prefix
2020-12-04 18:04:35 -05:00
dm-ps-service-time.c
dm: rename multipath path selector source files to have "dm-ps" prefix
2020-12-04 18:04:35 -05:00
dm-raid1.c
block: store a block_device pointer in struct bio
2021-01-24 18:17:20 -07:00
dm-raid.c
dm raid: fix discard limits for raid1
2021-01-04 15:02:30 -05:00
dm-region-hash.c
…
dm-rq.c
block: remove the request_queue to argument request based tracepoints
2020-12-04 09:42:00 -07:00
dm-rq.h
…
dm-snap-persistent.c
dm snap persistent: simplify area_io()
2020-09-29 16:33:12 -04:00
dm-snap-transient.c
…
dm-snap.c
dm snapshot: flush merged data before committing metadata
2021-01-06 18:28:34 -05:00
dm-stats.c
dm: replace zero-length array with flexible-array
2020-05-20 17:09:44 -04:00
dm-stats.h
…
dm-stripe.c
dm: add support for REQ_NOWAIT to various targets
2020-12-04 18:04:35 -05:00
dm-switch.c
dm: add support for REQ_NOWAIT to various targets
2020-12-04 18:04:35 -05:00
dm-sysfs.c
…
dm-table.c
dm table: Fix zoned model check and zone sectors check
2021-03-22 12:32:31 -04:00
dm-target.c
…
dm-thin-metadata.c
dm: use bdev_read_only to check if a device is read-only
2021-01-24 18:15:57 -07:00
dm-thin-metadata.h
dm thin metadata: Add support for a pre-commit callback
2019-12-05 17:05:24 -05:00
dm-thin.c
writeback: remove bdi->congested_fn
2020-07-08 17:20:46 -06:00
dm-uevent.c
…
dm-uevent.h
…
dm-unstripe.c
dm: add support for REQ_NOWAIT to various targets
2020-12-04 18:04:35 -05:00
dm-verity-fec.c
dm verity: fix FEC for RS roots unaligned to block size
2021-03-04 15:08:18 -05:00
dm-verity-fec.h
…
dm-verity-target.c
dm verity: fix DM_VERITY_OPTS_MAX value
2021-03-22 12:32:30 -04:00
dm-verity-verify-sig.c
dm verity: Add support for signature verification with 2nd keyring
2020-12-04 18:04:35 -05:00
dm-verity-verify-sig.h
dm verity: Fix compilation warning
2020-08-04 15:48:13 -04:00
dm-verity.h
dm verity: add "panic_on_corruption" error handling mode
2020-07-13 11:47:33 -04:00
dm-writecache.c
block: rename BIO_MAX_PAGES to BIO_MAX_VECS
2021-03-11 07:47:48 -07:00
dm-zero.c
dm: add support for REQ_NOWAIT to various targets
2020-12-04 18:04:35 -05:00
dm-zoned-metadata.c
block: use an on-stack bio in blkdev_issue_flush
2021-01-27 09:51:48 -07:00
dm-zoned-reclaim.c
dm zoned: Fix zone reclaim trigger
2020-07-08 12:21:53 -04:00
dm-zoned-target.c
dm table: Fix zoned model check and zone sectors check
2021-03-22 12:32:31 -04:00
dm-zoned.h
dm zoned: select reclaim zone based on device index
2020-06-05 14:59:53 -04:00
dm.c
dm: don't report "detected capacity change" on device creation
2021-03-22 12:32:32 -04:00
dm.h
dm table: fix DAX iterate_devices based device capability checks
2021-02-09 08:45:30 -05:00
Kconfig
dm crypt: support using trusted keys
2021-02-03 10:13:00 -05:00
Makefile
dm: rename multipath path selector source files to have "dm-ps" prefix
2020-12-04 18:04:35 -05:00
md-autodetect.c
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
md-bitmap.c
md/bitmap: fix memory leak of temporary bitmap
2020-10-08 22:37:39 -07:00
md-bitmap.h
…
md-cluster.c
for-5.11/drivers-2020-12-14
2020-12-16 13:09:32 -08:00
md-cluster.h
…
md-faulty.c
block: rename generic_make_request to submit_bio_noacct
2020-07-01 07:27:24 -06:00
md-linear.c
block: store a block_device pointer in struct bio
2021-01-24 18:17:20 -07:00
md-linear.h
md/raid1: Replace zero-length array with flexible-array
2020-05-13 12:02:23 -07:00
md-multipath.c
writeback: remove bdi->congested_fn
2020-07-08 17:20:46 -06:00
md-multipath.h
…
md.c
md: use rdev_read_only in restart_array
2021-02-01 09:35:20 -07:00
md.h
md: remove bio_alloc_mddev
2021-01-27 09:51:48 -07:00
raid0.c
for-5.11/block-2020-12-14
2020-12-16 12:57:51 -08:00
raid0.h
md/raid0: avoid RAID0 data corruption due to layout confusion.
2019-09-13 13:10:05 -07:00
raid1-10.c
…
raid1.c
md: remove bio_alloc_mddev
2021-01-27 09:51:48 -07:00
raid1.h
md/raid1: Replace zero-length array with flexible-array
2020-05-13 12:02:23 -07:00
raid5-cache.c
block: rename BIO_MAX_PAGES to BIO_MAX_VECS
2021-03-11 07:47:48 -07:00
raid5-log.h
…
raid5-ppl.c
block: rename BIO_MAX_PAGES to BIO_MAX_VECS
2021-03-11 07:47:48 -07:00
raid5.c
for-5.12/drivers-2021-02-17
2021-02-21 11:06:54 -08:00
raid5.h
md/raid5: let multiple devices of stripe_head share page
2020-09-24 16:44:44 -07:00
raid10.c
md/raid10: remove dead code in reshape_request
2021-02-08 08:33:16 -07:00
raid10.h
Revert "md/raid10: improve discard request for far layout"
2020-12-09 20:46:00 -08:00