Nicolas Pitre b91c4171c7 vt: don't use kmalloc() for the unicode screen buffer ... commit 9a98e7a80f upstream. Even if the actual screen size is bounded in vc_do_resize(), the unicode buffer is still a little more than twice the size of the glyph buffer and may exceed MAX_ORDER down the kmalloc() path. This can be triggered from user space. Since there is no point having a physically contiguous buffer here, let's avoid the above issue as well as reducing pressure on high order allocations by using vmalloc() instead. Signed-off-by: Nicolas Pitre <nico@fluxnic.net> Cc: <stable@vger.kernel.org> Acked-by: Sam Ravnborg <sam@ravnborg.org> Link: https://lore.kernel.org/r/nycvar.YSQ.7.76.2003282214210.2671@knanqh.ubzr Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-04-29 16:31:32 +02:00
..
hvc	tty: hvc: fix buffer overflow during hvc_alloc().	2020-04-29 16:31:30 +02:00
ipwireless	tty: ipwireless: Fix potential NULL pointer dereference	2020-01-27 14:50:16 +01:00
serdev	serdev: ttyport: restore client ops on deregistration	2020-02-28 16:38:49 +01:00
serial	serial: 8250_exar: add support for ACCES cards	2020-03-11 14:15:02 +01:00
vt	vt: don't use kmalloc() for the unicode screen buffer	2020-04-29 16:31:32 +02:00
amiserial.c
cyclades.c
ehv_bytechan.c	tty: evh_bytechan: Fix out of bounds accesses	2020-04-23 10:30:23 +02:00
goldfish.c
isicom.c
Kconfig
Makefile
mips_ejtag_fdc.c
moxa.c
moxa.h
mxser.c
mxser.h
n_gsm.c
n_hdlc.c	tty: Don't block on IO when ldisc change is pending	2019-12-13 08:52:28 +01:00
n_null.c
n_r3964.c	tty: Don't block on IO when ldisc change is pending	2019-12-13 08:52:28 +01:00
n_tracerouter.c
n_tracesink.c
n_tracesink.h
n_tty.c	tty: Don't block on IO when ldisc change is pending	2019-12-13 08:52:28 +01:00
nozomi.c
pty.c	pty: fix compat ioctls	2019-12-01 09:16:16 +01:00
rocket.c	tty: rocket, avoid OOB access	2020-04-29 16:31:30 +02:00
rocket.h
rocket_int.h
synclink.c
synclink_gt.c	tty: synclink_gt: Adjust indentation in several functions	2020-02-24 08:34:47 +01:00
synclinkmp.c	tty: synclinkmp: Adjust indentation in several functions	2020-02-24 08:34:47 +01:00
sysrq.c	sysrq: Remove duplicated sysrq message	2020-03-05 16:42:15 +01:00
tty_audit.c
tty_baudrate.c
tty_buffer.c
tty_io.c
tty_ioctl.c
tty_jobctrl.c
tty_ldisc.c	tty: Don't block on IO when ldisc change is pending	2019-12-13 08:52:28 +01:00
tty_ldsem.c	tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop	2019-08-16 10:12:50 +02:00
tty_mutex.c
tty_port.c	serdev: ttyport: restore client ops on deregistration	2020-02-28 16:38:49 +01:00
vcc.c