]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
s390/keyboard: sanitize array index in do_kdsk_ioctl
authorMartin Schwidefsky <schwidefsky@de.ibm.com>
Thu, 19 Jul 2018 08:27:33 +0000 (10:27 +0200)
committerStefan Bader <stefan.bader@canonical.com>
Wed, 24 Apr 2019 08:09:06 +0000 (10:09 +0200)
commit7046f57cc6e98ac317460f15a657ac8935cba92f
tree79d4e525d44012c1727aba9dba2c88b7fdc83906
parentdec6104e8322b323ff6f6f46947befd7ae400a53
s390/keyboard: sanitize array index in do_kdsk_ioctl

The kbd_ioctl uses two user controlled indexes for KDGKBENT/KDSKBENT.
Use array_index_nospec to prevent any out of bounds speculation.

Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
CVE-2017-5753

(cherry picked from commit 054732837c312c6007994badbc86b0976b228f77)
Signed-off-by: Juerg Haefliger <juergh@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
drivers/s390/char/keyboard.c