]> git.ipfire.org Git - thirdparty/kernel/stable-queue.git/commitdiff
3.0-stable patches
authorGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 26 Mar 2013 17:22:12 +0000 (10:22 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 26 Mar 2013 17:22:12 +0000 (10:22 -0700)
added patches:
drm-i915-restrict-kernel-address-leak-in-debugfs.patch

queue-3.0/drm-i915-restrict-kernel-address-leak-in-debugfs.patch [new file with mode: 0644]
queue-3.0/series

diff --git a/queue-3.0/drm-i915-restrict-kernel-address-leak-in-debugfs.patch b/queue-3.0/drm-i915-restrict-kernel-address-leak-in-debugfs.patch
new file mode 100644 (file)
index 0000000..68e6bb4
--- /dev/null
@@ -0,0 +1,32 @@
+From 2563a4524febe8f4a98e717e02436d1aaf672aa2 Mon Sep 17 00:00:00 2001
+From: Kees Cook <keescook@chromium.org>
+Date: Mon, 11 Mar 2013 12:25:19 -0700
+Subject: drm/i915: restrict kernel address leak in debugfs
+
+From: Kees Cook <keescook@chromium.org>
+
+commit 2563a4524febe8f4a98e717e02436d1aaf672aa2 upstream.
+
+Masks kernel address info-leak in object dumps with the %pK suffix,
+so they cannot be used to target kernel memory corruption attacks if
+the kptr_restrict sysctl is set.
+
+Signed-off-by: Kees Cook <keescook@chromium.org>
+Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
+Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+---
+ drivers/gpu/drm/i915/i915_debugfs.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/drivers/gpu/drm/i915/i915_debugfs.c
++++ b/drivers/gpu/drm/i915/i915_debugfs.c
+@@ -119,7 +119,7 @@ static const char *cache_level_str(int t
+ static void
+ describe_obj(struct seq_file *m, struct drm_i915_gem_object *obj)
+ {
+-      seq_printf(m, "%p: %s%s %8zd %04x %04x %d %d%s%s%s",
++      seq_printf(m, "%pK: %s%s %8zd %04x %04x %d %d%s%s%s",
+                  &obj->base,
+                  get_pin_flag(obj),
+                  get_tiling_flag(obj),
index 02d0da924b8ade918f6347ee6614598fa234b3c3..600255015f4ad0e5b8a6bfa79dd61639a07f1ed9 100644 (file)
@@ -21,3 +21,4 @@ sfc-only-use-tx-push-if-a-single-descriptor-is-to-be-written.patch
 alsa-hda-fix-typo-in-checking-iec958-emphasis-bit.patch
 alsa-snd-usb-mixer-propagate-errors-up-the-call-chain.patch
 alsa-snd-usb-mixer-ignore-einval-in-snd_usb_mixer_controls.patch
+drm-i915-restrict-kernel-address-leak-in-debugfs.patch