linux/drivers/staging
Arve Hjønnevåg 2a90957f2c Staging: android: binder: Fix use-after-free bug
binder_update_page_range could read freed memory if the vma of the
selected process was freed right before the check that the vma
belongs to the mm struct it just locked.

If the vm_mm pointer in that freed vma struct had also been rewritten
with a value that matched the locked mm struct, then the code would
proceed and possibly modify the freed vma.

Signed-off-by: Arve Hjønnevåg <arve@android.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2012-03-09 13:14:08 -08:00
..
android Staging: android: binder: Fix use-after-free bug 2012-03-09 13:14:08 -08:00
asus_oled staging: asus_oled: Remove superfluous loop 2012-02-29 15:43:21 -08:00
bcm Staging: bcm: fix possible memory leak of 'pstAddIndication' in CmHost.c and removes a whitespace 2012-03-02 16:36:55 -08:00
comedi staging/comedi/drivers fix spelling errors 2012-03-09 13:14:08 -08:00
cptm1217
crystalhd staging: crystalhd: Fix typo in crystalhd_hw.c 2012-03-08 09:57:38 -08:00
cxt1e1 Merge branch 'staging-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging 2012-01-09 12:18:17 -08:00
echo
et131x Staging: et131x: unify return value of .ndo_set_mac_address if address is invalid 2012-02-24 12:03:13 -08:00
frontier Staging: frontier: Fix checkpatch.pl issue. 2012-02-24 12:03:12 -08:00
ft1000 Staging: ft1000: ft1000-pcmia: fix space required after that ', ' in ft1000_proc.c 2012-02-09 09:44:35 -08:00
iio staging:iio:tsl2563 rewrite probe error handling 2012-03-07 13:36:45 -08:00
keucr staging: clean up Greg's email address in some TODO files 2012-02-15 14:45:40 -08:00
line6 staging: line6: separate handling of buffer allocation and stream startup 2012-02-09 09:14:35 -08:00
media Staging: media: lirc: lirc_sasem.c: fixed long line coding style issue 2012-02-29 15:52:53 -08:00
mei staging/mei: don't use read buffer for writing 2012-03-07 13:45:42 -08:00
nvec staging: nvec: Fix Kconfig dependencies 2012-01-31 10:28:00 -08:00
octeon staging/octeon: Fix PHY binding in octeon-ethernet driver. 2012-02-24 12:03:15 -08:00
olpc_dcon
omapdrm staging: drm/omap: mmap of tiled buffers with stride >4kb 2012-03-07 13:38:08 -08:00
ozwpan staging: ozwpan: remove debug allocator 2012-03-02 16:51:09 -08:00
panel
phison
quatech_usb2 module_param: make bool parameters really bool (drivers & misc) 2012-01-13 09:32:20 +10:30
quickstart Staging: quickstart: Fix compilation warning on 64 bit arch 2012-02-13 20:08:56 -08:00
ramster staging: ramster: Dont build ramster when CONFIGFS_FS=m 2012-02-24 11:59:58 -08:00
rtl8187se
rtl8192e Staging, rtl8192e, softmac: remove redundant memset and fix mem leak 2012-02-15 17:21:43 -08:00
rtl8192u Staging: rtl8712/rtl8192u: move USB device ID within staging drivers. 2012-03-02 16:36:38 -08:00
rtl8712 staging: r8712u: Fix Smatch warning 2012-03-07 13:36:45 -08:00
rts5139 staging: Update TODO for rts5139 and rts_pstor 2012-02-24 12:03:14 -08:00
rts_pstor staging: Update TODO for rts5139 and rts_pstor 2012-02-24 12:03:14 -08:00
sbe-2t3e3 Staging: sbe-2t3e3: logical || vs bitwise | 2012-02-09 09:51:17 -08:00
sep staging: Fix SEP build 2012-02-13 14:42:02 -08:00
serial
serqt_usb2 module_param: make bool parameters really bool (drivers & misc) 2012-01-13 09:32:20 +10:30
slicoss staging: clean up Greg's email address in some TODO files 2012-02-15 14:45:40 -08:00
sm7xx Staging: sm7xx/smtcfb.c included linux/module.h twice 2012-02-15 17:21:43 -08:00
speakup module_param: make bool parameters really bool (drivers & misc) 2012-01-13 09:32:20 +10:30
ste_rmi4
telephony telephony: Move to staging 2012-02-08 16:58:04 -08:00
tidspbridge staging: tidspbridge: detect wdt3 feature at runtime 2012-02-24 12:05:38 -08:00
usbip Staging: usbip: Remove commented code. 2012-02-24 11:59:57 -08:00
vme staging: vme: code convention fix 2012-02-09 09:16:52 -08:00
vt6655 staging: Fix typo in bssdb.c 2012-02-24 12:05:37 -08:00
vt6656 staging: Fix typo in bssdb.c 2012-02-24 12:05:37 -08:00
winbond
wlags49_h2 Merge branch 'staging-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging 2012-01-09 12:18:17 -08:00
wlags49_h25
wlan-ng Staging: wlan-ng: still setting wrong data 2012-02-29 15:55:52 -08:00
xgifb staging/xgifb: remove remaining duplicate initdef.h defines 2012-02-10 09:56:25 -08:00
zcache staging: zcache: make zcache builtin only 2012-03-07 13:30:17 -08:00
zram staging: zram: Rename module parameter 2012-02-13 20:11:54 -08:00
zsmalloc staging: zsmalloc: remove SPARSEMEM dep from Kconfig 2012-03-07 13:31:28 -08:00
Kconfig staging: ozwpan: Plumbed in Kconfig and Kbuild 2012-02-24 09:29:24 -08:00
Makefile staging: ozwpan: Plumbed in Kconfig and Kbuild 2012-02-24 09:29:24 -08:00
staging.c