On Mon, Oct 22, 2018 at 09:19:04AM -0700, H. Peter Anvin (Intel) wrote: > From: "H. Peter Anvin" <[email protected]> > > On architectures with CBAUDEX == 0 (Alpha and PowerPC), the code in > tty_baudrate.c does > not do any limit checking on the tty_baudrate[] array, and in fact a > buffer overrun is possible on both architectures. Add a limit check to > prevent that situation. > > This will be followed by a much bigger cleanup/simplification patch. > > Signed-off-by: H. Peter Anvin (Intel) <[email protected]> > Requested-by: Cc: Johan Hovold <[email protected]> > Cc: Greg Kroah-Hartman <[email protected]> > Cc: Jiri Slaby <[email protected]> > Cc: Al Viro <[email protected]> > Cc: Richard Henderson <[email protected]> > Cc: Ivan Kokshaysky <[email protected]> > Cc: Matt Turner <[email protected]> > Cc: Thomas Gleixner <[email protected]> > Cc: Kate Stewart <[email protected]> > Cc: Philippe Ombredanne <[email protected]> > Cc: Greg Kroah-Hartman <[email protected]> > Cc: Eugene Syromiatnikov <[email protected]> > Cc: <[email protected]> > Cc: <[email protected]> > Cc: Alan Cox <[email protected]> > Cc: <[email protected]> > --- > drivers/tty/tty_baudrate.c | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-)
As I think Al's big termios cleanups are going to be hitting Linus's tree soon, do you know how these patches interact with that? This patch seems like it will not, so I'll be glad to queue that up after my first round of patches get merged to Linus later this week, but the second one worries me. thanks, greg k-h
