linux/drivers/staging
Viktor Slavkovic 443064cb0b staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl
A lock-unlock is missing in ASHMEM_SET_SIZE ioctl which can result in a
race condition when mmap is called. After the !asma->file check, before
setting asma->size, asma->file can be set in mmap. That would result in
having different asma->size than the mapped memory size. Combined with
ASHMEM_UNPIN ioctl and shrinker invocation, this can result in memory
corruption.

Signed-off-by: Viktor Slavkovic <viktors@google.com>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-01-09 15:32:11 +01:00
..
android staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl 2018-01-09 15:32:11 +01:00
board
ccree staging: ccree: Uninitialized return in ssi_ahash_import() 2017-12-06 15:49:26 +01:00
clocking-wizard
comedi staging: comedi: ni_atmio: fix license warning. 2017-11-28 14:36:45 +01:00
dgnc Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
emxx_udc
fbtft Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
fsl-dpaa2 staging: fsl-dpaa2/eth: Extra headroom in RX buffers 2017-11-03 16:19:27 +01:00
fsl-mc
fwserial Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
gdm724x Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
goldfish
greybus treewide: setup_timer() -> timer_setup() 2017-11-21 15:57:07 -08:00
gs_fpgaboot
iio Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
irda treewide: Remove TIMER_FUNC_TYPE and TIMER_DATA_TYPE casts 2017-11-21 16:35:54 -08:00
ks7010 Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
lustre staging: lustre: lnet: Fix recent breakage from list_for_each conversion 2017-12-19 11:51:21 +01:00
media media: atomisp: stop producing hundreds of kernel-doc warnings 2017-11-30 04:18:38 -05:00
most treewide: setup_timer() -> timer_setup() 2017-11-21 15:57:07 -08:00
mt29f_spinand
netlogic
nvec
octeon
octeon-usb staging: octeon-usb: use __delay() instead of cvmx_wait() 2017-11-28 14:36:46 +01:00
olpc_dcon
pi433 staging: pi433: Fixes issue with bit shift in rf69_get_modulation 2017-12-06 15:49:26 +01:00
rtl8188eu staging: rtl8188eu: Fix incorrect response to SIOCGIWESSID 2017-11-28 14:36:45 +01:00
rtl8192e Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
rtl8192u treewide: setup_timer() -> timer_setup() 2017-11-21 15:57:07 -08:00
rtl8712 treewide: setup_timer() -> timer_setup() 2017-11-21 15:57:07 -08:00
rtl8723bs Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
rtlwifi
rts5208 Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
skein
sm750fb Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
speakup treewide: Switch DEFINE_TIMER callbacks to struct timer_list * 2017-11-21 15:57:05 -08:00
typec
unisys treewide: setup_timer() -> timer_setup() 2017-11-21 15:57:07 -08:00
vboxvideo main drm pull request for v4.15 2017-11-15 20:42:10 -08:00
vc04_services Merge branch 'work.get_user_pages_fast' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2017-11-17 12:38:51 -08:00
vme Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
vt6655 Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
vt6656 Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
wilc1000 treewide: setup_timer() -> timer_setup() 2017-11-21 15:57:07 -08:00
wlan-ng USB/PHY patches for 4.15-rc1 2017-11-13 21:14:07 -08:00
xgifb Staging/IIO patches for 4.15-rc1 2017-11-13 20:53:28 -08:00
Kconfig
Makefile