David Miller f629307c85 tty: termios locking functions break with new termios type
I ran into a few problems.

n_tty_ioctl() for instance:

drivers/char/tty_ioctl.c:799: error: $,1rxstruct termios$,1ry has no
member named $,1rxc_ispeed$,1ry

This is calling the copy interface that is supposed to be using
a termios2 when the new interfaces are defined, however:

	case TIOCGLCKTRMIOS:
		if (kernel_termios_to_user_termios((struct termios __user *)arg, real_tty->termios_locked))
			return -EFAULT;
		return 0;

This is going to write over the end of the userspace
structure by a few bytes, and wasn't caught by you yet
because the i386 implementation is simply copy_to_user()
which does zero type checking.

Signed-off-by: Alan Cox <alan@redhat.com>
Cc: "David S. Miller" <davem@davemloft.net>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-09-11 17:21:20 -07:00
..
2007-08-25 18:14:00 +10:00
2007-07-31 15:39:44 -07:00
2007-08-22 19:52:46 -07:00
2007-08-22 19:52:44 -07:00
2007-07-16 09:05:46 -07:00
2007-05-08 11:15:09 -07:00
2007-05-08 11:15:13 -07:00
2007-05-21 09:18:19 -07:00
2007-07-17 10:23:10 -07:00
2007-07-26 11:35:19 -07:00
2007-02-20 17:11:55 +00:00
2007-07-19 10:04:43 -07:00
2007-07-19 10:04:43 -07:00
2007-07-29 17:09:29 -07:00
2007-07-17 10:23:10 -07:00
2007-07-29 17:09:29 -07:00
2007-07-16 09:05:47 -07:00
2007-02-12 09:48:30 -08:00
2007-07-21 17:49:16 -07:00
2007-07-17 10:23:10 -07:00
2007-07-16 09:05:46 -07:00
2007-07-10 17:51:13 -07:00
2006-12-08 08:28:59 -08:00
2007-08-22 19:52:46 -07:00
2007-05-08 11:15:05 -07:00
2007-07-16 09:05:47 -07:00
2006-12-20 16:37:48 +11:00