linux-uconsole/drivers/usb/serial
Dan Rosenberg f2ba1916d3 USB: serial/mos*: prevent reading uninitialized stack memory
commit a0846f1868 upstream.

The TIOCGICOUNT device ioctl in both mos7720.c and mos7840.c allows
unprivileged users to read uninitialized stack memory, because the
"reserved" member of the serial_icounter_struct struct declared on the
stack is not altered or zeroed before being copied back to the user.
This patch takes care of it.

Signed-off-by: Dan Rosenberg <dan.j.rosenberg@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2010-09-26 17:21:14 -07:00
..
aircable.c USB: serial: fix assumption that throttle/unthrottle cannot sleep 2009-10-09 13:52:09 -07:00
ark3116.c USB: ark3116: add IrDA support for Gembird UIR-22 2009-09-23 06:46:32 -07:00
belkin_sa.c tty: USB does not need the filp argument in the drivers 2009-09-19 13:13:26 -07:00
belkin_sa.h belkin_sa: clean up code 2008-07-22 13:03:22 -07:00
bus.c USB: usb-serial: call port_probe and port_remove at the right times 2009-06-15 21:44:47 -07:00
ch341.c USb: Break support for WinChipHead CH341 340 USB->Serial "chip" 2009-09-23 06:46:35 -07:00
ChangeLog.history trivial: Fix misspelling of firmware 2009-03-30 15:21:59 +02:00
console.c USB serial: update the console driver 2009-09-19 13:13:42 -07:00
cp210x.c USB: cp210x: Add B&G H3000 link cable ID 2010-09-20 13:17:47 -07:00
cyberjack.c tty: USB does not need the filp argument in the drivers 2009-09-19 13:13:26 -07:00
cypress_m8.c USB: serial: fix assumption that throttle/unthrottle cannot sleep 2009-10-09 13:52:09 -07:00
cypress_m8.h trivial: fix typo "to to" in multiple files 2009-09-21 15:14:55 +02:00
digi_acceleport.c USB: digi_acceleport: Fix broken unthrottle. 2009-10-09 13:52:05 -07:00
empeg.c USB: serial: fix assumption that throttle/unthrottle cannot sleep 2009-10-09 13:52:09 -07:00
ezusb.c USB: remove use of err() in drivers/usb/serial 2008-10-17 14:41:10 -07:00
ezusb_convert.pl
ftdi_sio.c USB: ftdi_sio: Added custom PIDs for ChamSys products 2010-09-20 13:17:47 -07:00
ftdi_sio.h USB: ftdi_sio: isolate all device IDs to new ftdi_sio_ids.h header 2010-03-15 08:50:09 -07:00
ftdi_sio_ids.h USB: ftdi_sio: Added custom PIDs for ChamSys products 2010-09-20 13:17:47 -07:00
funsoft.c funsoft: Switch to linux/uaccess 2008-07-22 13:03:23 -07:00
garmin_gps.c USB: serial: fix assumption that throttle/unthrottle cannot sleep 2009-10-09 13:52:09 -07:00
generic.c usb: serial: fix memory leak in generic driver 2010-01-25 10:49:29 -08:00
hp4x.c USB: remove info() macro from usb/serial drivers 2008-10-17 14:41:09 -07:00
io_16654.h
io_edgeport.c trivial: fix typo "to to" in multiple files 2009-09-21 15:14:55 +02:00
io_edgeport.h
io_ionsp.h
io_tables.h USB: usb-serial: replace shutdown with disconnect, release 2009-06-15 21:44:47 -07:00
io_ti.c USB: io_ti: check firmware version before updating 2010-08-26 16:41:58 -07:00
io_ti.h
io_usbvend.h
ipaq.c USB: ipaq: fix oops when device is plugged in 2009-10-09 13:52:07 -07:00
ipaq.h
ipw.c tty: USB does not need the filp argument in the drivers 2009-09-19 13:13:26 -07:00
ir-usb.c USB: ir-usb: fix double free 2010-07-05 11:10:36 -07:00
iuu_phoenix.c USB: iuu_phoenix: add a way to select the default VCC 2009-09-23 06:46:36 -07:00
iuu_phoenix.h
Kconfig trivial: fix typos/grammar errors in Kconfig texts 2009-03-30 15:22:01 +02:00
keyspan.c tty: USB does not need the filp argument in the drivers 2009-09-19 13:13:26 -07:00
keyspan.h tty: USB does not need the filp argument in the drivers 2009-09-19 13:13:26 -07:00
keyspan_pda.c USB: serial: fix assumption that throttle/unthrottle cannot sleep 2009-10-09 13:52:09 -07:00
keyspan_usa26msg.h
keyspan_usa28msg.h
keyspan_usa49msg.h
keyspan_usa67msg.h
keyspan_usa90msg.h
kl5kusb105.c USB: kl5usb105: fix memory leak 2010-07-05 11:10:36 -07:00
kl5kusb105.h
kobil_sct.c USB: kobil: fix memory leak 2010-07-05 11:10:35 -07:00
kobil_sct.h
Makefile USB: serial: rename cp2101 driver to cp210x 2009-03-24 16:20:44 -07:00
Makefile-keyspan_pda_fw
mct_u232.c USB: serial: fix assumption that throttle/unthrottle cannot sleep 2009-10-09 13:52:09 -07:00
mct_u232.h
mos7720.c USB: serial/mos*: prevent reading uninitialized stack memory 2010-09-26 17:21:14 -07:00
mos7840.c USB: serial/mos*: prevent reading uninitialized stack memory 2010-09-26 17:21:14 -07:00
moto_modem.c USB: serial: Spelling correction in Motorola USB Phone driver 2009-09-23 06:46:29 -07:00
navman.c USB: add device IDs for igotu to navman 2010-08-26 16:41:56 -07:00
omninet.c tty: USB does not need the filp argument in the drivers 2009-09-19 13:13:26 -07:00
opticon.c USB: serial: fix race between unthrottle and completion handler in opticon 2009-10-09 13:52:08 -07:00
option.c USB: option: add Celot CT-650 2010-08-26 16:41:56 -07:00
oti6858.c USB: serial: no unnecessary GFP_ATOMIC in oti6858 2009-10-09 13:52:09 -07:00
oti6858.h
pl2303.c USB: pl2303: New vendor and product id 2010-08-26 16:41:57 -07:00
pl2303.h USB: pl2303: New vendor and product id 2010-08-26 16:41:57 -07:00
qcserial.c USB: qcserial: add new device ids 2010-04-01 15:58:33 -07:00
safe_serial.c USB: remove use of err() in drivers/usb/serial 2008-10-17 14:41:10 -07:00
siemens_mpi.c USB: add siemens_mpi usb-serial "stub" driver 2009-01-07 10:00:13 -08:00
sierra.c USB: Add PID for Sierra 250U to drivers/usb/serial/sierra.c 2010-08-02 10:21:06 -07:00
spcp8x5.c trivial: remove unnecessary semicolons 2009-09-21 15:14:58 +02:00
symbolserial.c USB: serial: fix assumption that throttle/unthrottle cannot sleep 2009-10-09 13:52:09 -07:00
ti_usb_3410_5052.c tty: USB does not need the filp argument in the drivers 2009-09-19 13:13:26 -07:00
ti_usb_3410_5052.h USB: two more usb ids for ti_usb_3410_5052 2009-02-09 11:19:48 -08:00
usb-serial.c USB: small fix in error case of suspend in generic usbserial code 2009-10-09 13:52:08 -07:00
usb_debug.c tty: USB does not need the filp argument in the drivers 2009-09-19 13:13:26 -07:00
visor.c USB: visor: fix memory leak 2010-07-05 11:10:34 -07:00
visor.h
whiteheat.c USB: serial: fix assumption that throttle/unthrottle cannot sleep 2009-10-09 13:52:09 -07:00
whiteheat.h whiteheat: coding style 2008-07-22 13:03:22 -07:00