Drivers that register a ->fault handler, but do not range-check the offset argument, must set VM_DONTEXPAND in the vm_flags in order to prevent an expanding mremap from overflowing the resource. I've audited the tree and attempted to fix these problems (usually by adding VM_DONTEXPAND where it is not obvious). Signed-off-by: Nick Piggin <npiggin@suse.de> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> |
||
|---|---|---|
| .. | ||
| caiaq | ||
| usx2y | ||
| Kconfig | ||
| Makefile | ||
| usbaudio.c | ||
| usbaudio.h | ||
| usbmidi.c | ||
| usbmixer.c | ||
| usbmixer_maps.c | ||
| usbquirks.h | ||