]> git.baikalelectronics.ru Git - kernel.git/commit
gpio: GPIO_GET_CHIPINFO_IOCTL: Fix line offset validation
authorLars-Peter Clausen <lars@metafoo.de>
Tue, 18 Oct 2016 14:53:59 +0000 (16:53 +0200)
committerLinus Walleij <linus.walleij@linaro.org>
Fri, 21 Oct 2016 12:36:44 +0000 (14:36 +0200)
commit57575cb97ee384df22b118e417afc0363dfdc324
tree60ddc9a54e71d504c2ac0d2e79ceee6df0acd734
parent0e1c44c4a82b824ba7dcc24293ab0e2043728025
gpio: GPIO_GET_CHIPINFO_IOCTL: Fix line offset validation

The current line offset validation is off by one. Depending on the data
stored behind the descs array this can either cause undefined behavior or
disclose arbitrary, potentially sensitive, memory to the issuing userspace
application.

Make sure that offset is within the bounds of the desc array.

Cc: stable@vger.kernel.org
Fixes: 2ca03dea2e42 ("gpio: add userspace ABI for GPIO line information")
Signed-off-by: Lars-Peter Clausen <lars@metafoo.de>
Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
drivers/gpio/gpiolib.c