Peter Hurley 308bbc9ab8 serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485) ...

The omap-serial driver emulates RS485 delays using software timers,
but neglects to clamp the input values from the unprivileged
ioctl(TIOCSRS485). Because the software implementation busy-waits,
malicious userspace could stall the cpu for ~49 days.

Clamp the input values to < 100ms.

Fixes: 4a0ac0f55b ("OMAP: add RS485 support")
Cc: <stable@vger.kernel.org>  # 3.12+
Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-02-06 23:04:51 -08:00

..

hvc

Merge tag 'tty-4.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

2015-11-04 21:35:12 -08:00

ipwireless

…

serial

serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)

2016-02-06 23:04:51 -08:00

vt

Merge tag 'staging-4.5-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2016-01-31 17:00:27 -08:00

amiserial.c

tty: Remove unused SERIAL_DO_RESTART define

2015-12-13 19:59:48 -08:00

bfin_jtag_comm.c

…

cyclades.c

cyclades: Deinline cyz_is_loaded, save 240 bytes

2015-12-13 19:59:48 -08:00

ehv_bytechan.c

…

goldfish.c

…

isicom.c

isicom: Deinline drop_dtr, save 112 bytes

2015-12-13 19:59:48 -08:00

Kconfig

…

Makefile

…

metag_da.c

…

mips_ejtag_fdc.c

ttyFDC: Fix build problems due to use of module_{init,exit}

2015-10-17 21:29:21 -07:00

moxa.c

tty: Remove unused SERIAL_DO_RESTART define

2015-12-13 19:59:48 -08:00

moxa.h

…

mxser.c

…

mxser.h

…

n_gsm.c

…

n_hdlc.c

…

n_r3964.c

tty: r3964: Replace/remove bogus tty lock use

2015-10-17 21:11:29 -07:00

n_tracerouter.c

n_tracerouter: stop including <asm-generic/bug>

2015-10-15 00:21:10 +02:00

n_tracesink.c

n_tracesink: stop including <asm-generic/bug>

2015-10-15 00:21:11 +02:00

n_tracesink.h

…

n_tty.c

n_tty: Fix unsafe reference to "other" ldisc

2016-01-26 23:17:54 -08:00

nozomi.c

…

pty.c

tty: Remove __func__ from tty_debug() macro

2015-12-13 19:59:48 -08:00

rocket_int.h

…

rocket.c

tty: Remove tty_port::close_wait

2015-10-17 21:11:29 -07:00

rocket.h

…

synclink_gt.c

tty: synclink_gt: Rename tty_driver_name

2015-12-13 19:59:48 -08:00

synclink.c

tty: synclink, fix indentation

2015-10-17 21:14:06 -07:00

synclinkmp.c

tty: Remove ASYNC_CLOSING checks in open()/hangup() methods

2015-10-17 21:11:29 -07:00

sysrq.c

sysrq: Fix warning in sysrq generated crash.

2015-12-29 16:29:18 -08:00

tty_audit.c

tty: audit: Fix audit source

2015-11-20 16:19:54 -08:00

tty_buffer.c

tty: Fix GPF in flush_to_ldisc()

2015-12-12 23:05:28 -08:00

tty_io.c

tty: Drop krefs for interrupted tty lock

2016-02-06 16:56:46 -08:00

tty_ioctl.c

tty: Remove __func__ from tty_debug() macro

2015-12-13 19:59:48 -08:00

tty_ldisc.c

tty: Prevent ldisc drivers from re-using stale tty fields

2015-12-13 19:59:48 -08:00

tty_ldsem.c

tty: Deinline __ldsem_down_write_nested, save 128 bytes

2015-12-13 19:59:48 -08:00

tty_mutex.c

tty: Drop krefs for interrupted tty lock

2016-02-06 16:56:46 -08:00

tty_port.c

tty: Define tty_*() printk macros

2015-12-13 19:59:48 -08:00