Daniel Thompson c532caa7df kdb: Fix the putarea helper function ... [ Upstream commit c1cb81429d ] Currently kdb_putarea_size() uses copy_from_kernel_nofault() to write *to* arbitrary kernel memory. This is obviously wrong and means the memory modify ('mm') command is a serious risk to debugger stability: if we poke to a bad address we'll double-fault and lose our debug session. Fix this the (very) obvious way. Note that there are two Fixes: tags because the API was renamed and this patch will only trivially backport as far as the rename (and this is probably enough). Nevertheless Christoph's rename did not introduce this problem so I wanted to record that! Fixes: fe557319aa ("maccess: rename probe_kernel_{read,write} to copy_{from,to}_kernel_nofault") Fixes: 5d5314d679 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Daniel Thompson <daniel.thompson@linaro.org> Reviewed-by: Douglas Anderson <dianders@chromium.org> Link: https://lore.kernel.org/r/20220128144055.207267-1-daniel.thompson@linaro.org Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-04-08 14:23:51 +02:00
..
bpf	bpf: Fix UAF due to race between btf_try_get_module and load_module	2022-04-08 14:23:24 +02:00
cgroup	cgroup-v1: Correct privileges check in release_agent writes	2022-03-02 11:47:47 +01:00
configs	…
debug	kdb: Fix the putarea helper function	2022-04-08 14:23:51 +02:00
dma	dma-debug: fix return value of __setup handlers	2022-04-08 14:23:47 +02:00
entry	signal: Replace force_fatal_sig with force_exit_sig when in doubt	2021-11-25 09:49:07 +01:00
events	perf/core: Fix address filter parser for multiple filters	2022-04-08 14:23:10 +02:00
gcov	…
irq	PCI/MSI: Move non-mask check back into low level accessors	2021-11-18 19:17:14 +01:00
kcsan	…
livepatch	livepatch: Fix build failure on 32 bits processors	2022-04-08 14:23:29 +02:00
locking	locking/lockdep: Avoid potential access of invalid memory in lock_class	2022-04-08 14:22:48 +02:00
power	PM: suspend: fix return value of __setup handler	2022-04-08 14:23:07 +02:00
printk	printk: fix return value of printk.devkmsg __setup handler	2022-04-08 14:23:19 +02:00
rcu	rcu: Don't deboost before reporting expedited quiescent state	2022-03-28 09:58:45 +02:00
sched	sched/rt: Plug rt_mutex_setprio() vs push_rt_task() race	2022-04-08 14:23:11 +02:00
time	clocksource: Avoid accidental unstable marking of clocksources	2022-01-27 11:04:08 +01:00
trace	tracing: Have trace event string test handle zero length strings	2022-04-08 14:22:57 +02:00
.gitignore	…
Kconfig.freezer	…
Kconfig.hz	…
Kconfig.locks	…
Kconfig.preempt	…
Makefile	…
acct.c	…
async.c	Revert "module, async: async_synchronize_full() on module init iff async is used"	2022-02-23 12:03:07 +01:00
audit.c	audit: improve audit queue handling when "audit=1" on cmdline	2022-02-08 18:34:03 +01:00
audit.h	audit: log AUDIT_TIME_* records only from rules	2022-04-08 14:23:06 +02:00
audit_fsnotify.c	…
audit_tree.c	…
audit_watch.c	…
auditfilter.c	…
auditsc.c	audit: log AUDIT_TIME_* records only from rules	2022-04-08 14:23:06 +02:00
backtracetest.c	…
bounds.c	…
capability.c	…
cfi.c	…
compat.c	…
configs.c	…
context_tracking.c	…
cpu.c	sched/scs: Reset task stack state in bringup_cpu()	2021-12-01 09:04:54 +01:00
cpu_pm.c	…
crash_core.c	kernel/crash_core: suppress unknown crashkernel parameter warning	2021-12-29 12:28:49 +01:00
crash_dump.c	…
cred.c	ucounts: Base set_cred_ucounts changes on the real user	2022-02-23 12:03:20 +01:00
delayacct.c	…
dma.c	…
exec_domain.c	…
exit.c	…
extable.c	…
fail_function.c	…
fork.c	sched: Fix yet more sched_fork() races	2022-03-08 19:12:49 +01:00
freezer.c	…
futex.c	…
gen_kheaders.sh	…
groups.c	…
hung_task.c	…
iomem.c	…
irq_work.c	…
jump_label.c	…
kallsyms.c	…
kcmp.c	…
kcov.c	…
kexec.c	…
kexec_core.c	…
kexec_elf.c	…
kexec_file.c	…
kexec_internal.h	…
kheaders.c	…
kmod.c	…
kprobes.c	kprobes: Limit max data_size of the kretprobe instances	2021-12-08 09:04:41 +01:00
ksysfs.c	…
kthread.c	…
latencytop.c	…
module-internal.h	…
module.c	Revert "module, async: async_synchronize_full() on module init iff async is used"	2022-02-23 12:03:07 +01:00
module_signature.c	…
module_signing.c	…
notifier.c	…
nsproxy.c	…
padata.c	…
panic.c	…
params.c	…
pid.c	…
pid_namespace.c	…
profile.c	…
ptrace.c	ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE	2022-04-08 14:22:50 +02:00
range.c	…
reboot.c	…
regset.c	…
relay.c	…
resource.c	kernel/resource: fix kfree() of bootmem memory again	2022-04-08 14:23:43 +02:00
resource_kunit.c	…
rseq.c	rseq: Remove broken uapi field layout on 32-bit little endian	2022-04-08 14:23:10 +02:00
scftorture.c	…
scs.c	scs: Release kasan vmalloc poison in scs_free process	2021-11-18 19:16:29 +01:00
seccomp.c	seccomp: Invalidate seccomp mode to catch death failures	2022-02-16 12:56:38 +01:00
signal.c	signal: In get_signal test for signal_group_exit every time through the loop	2022-03-08 19:12:34 +01:00
smp.c	…
smpboot.c	…
smpboot.h	…
softirq.c	…
stackleak.c	gcc-plugins/stackleak: Use noinstr in favor of notrace	2022-02-23 12:03:07 +01:00
stacktrace.c	…
static_call.c	…
stop_machine.c	…
sys.c	ucounts: Move RLIMIT_NPROC handling after set_user	2022-02-23 12:03:20 +01:00
sys_ni.c	…
sysctl-test.c	…
sysctl.c	x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting	2022-03-11 12:22:31 +01:00
task_work.c	…
taskstats.c	…
test_kprobes.c	…
torture.c	…
tracepoint.c	…
tsacct.c	taskstats: Cleanup the use of task->exit_code	2022-01-27 11:05:35 +01:00
ucount.c	ucounts: Handle wrapping in is_ucounts_overlimit	2022-02-23 12:03:20 +01:00
uid16.c	…
uid16.h	…
umh.c	…
up.c	…
user-return-notifier.c	…
user.c	…
user_namespace.c	ucounts: Fix systemd LimitNPROC with private users regression	2022-03-08 19:12:42 +01:00
usermode_driver.c	…
utsname.c	…
utsname_sysctl.c	…
watch_queue.c	watch_queue: Actually free the watch	2022-04-08 14:23:10 +02:00
watchdog.c	…
watchdog_hld.c	…
workqueue.c	workqueue: Fix unbind_workers() VS wq_worker_running() race	2022-01-16 09:12:41 +01:00
workqueue_internal.h	…