Alexander Potapenko 305e519ce4 lib/stackdepot.c: fix global out-of-bounds in stack_slabs ...

Walter Wu has reported a potential case in which init_stack_slab() is
called after stack_slabs[STACK_ALLOC_MAX_SLABS - 1] has already been
initialized.  In that case init_stack_slab() will overwrite
stack_slabs[STACK_ALLOC_MAX_SLABS], which may result in a memory
corruption.

Link: http://lkml.kernel.org/r/[email protected]
Fixes: cd11016e5f ("mm, kasan: stackdepot implementation. Enable stackdepot for SLAB")
Signed-off-by: Alexander Potapenko <[email protected]>
Reported-by: Walter Wu <[email protected]>
Cc: Dmitry Vyukov <[email protected]>
Cc: Matthias Brugger <[email protected]>
Cc: Thomas Gleixner <[email protected]>
Cc: Josh Poimboeuf <[email protected]>
Cc: Kate Stewart <[email protected]>
Cc: Greg Kroah-Hartman <[email protected]>
Cc: <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>

2020-02-21 11:22:15 -08:00

..

842

…

crypto

crypto: chacha20poly1305 - add back missing test vectors and test chunking

2020-01-22 16:21:11 +08:00

dim

…

fonts

…

kunit

kunit: allow kunit to be loaded as a module

2020-01-09 16:43:40 -07:00

livepatch

livepatch/samples/selftest: Use klp_shadow_alloc() API correctly

2020-01-17 11:12:06 +01:00

lz4

lz4: do not export static symbol

2019-09-20 09:06:26 -07:00

lzo

lib/lzo/lzo1x_compress.c: fix alignment bug in lzo-rle

2019-09-25 17:51:41 -07:00

math

lib/math/rational.c: fix possible incorrect result from rational fractions helper

2019-12-04 19:44:13 -08:00

mpi

…

raid6

kbuild: rename hostprogs-y/always to hostprogs/always-y

2020-02-04 01:53:07 +09:00

reed_solomon

…

vdso

lib/vdso: Only read hrtimer_res when needed in __cvdso_clock_getres()

2020-01-16 21:24:46 +01:00

xz

lib/xz: fix XZ_DYNALLOC to avoid useless memory reallocations

2019-11-15 18:34:00 -08:00

zlib_deflate

lib/zlib: add zlib_deflate_dfltcc_enabled() function

2020-01-31 10:30:40 -08:00

zlib_dfltcc

lib/zlib: add zlib_deflate_dfltcc_enabled() function

2020-01-31 10:30:40 -08:00

zlib_inflate

lib/zlib: add s390 hardware support for kernel zlib_inflate

2020-01-31 10:30:40 -08:00

zstd

lib/zstd/mem.h: replace __inline by inline

2019-09-15 19:42:16 +02:00

.gitignore

…

argv_split.c

…

ashldi3.c

…

ashrdi3.c

…

asn1_decoder.c

…

assoc_array.c

…

atomic64_test.c

…

atomic64.c

…

audit.c

…

bcd.c

…

bch.c

…

bitmap.c

lib: rework bitmap_parse()

2020-02-04 03:05:26 +00:00

bitrev.c

…

bootconfig.c

bootconfig: Allocate xbc_nodes array dynamically

2020-02-10 17:19:39 -05:00

bsearch.c

lib/bsearch: Use generic type for comparator function

2019-11-14 13:15:11 -05:00

btree.c

…

bucket_locks.c

…

bug.c

bug: move WARN_ON() "cut here" into exception handler

2019-09-25 17:51:41 -07:00

build_OID_registry

…

bust_spinlocks.c

…

check_signature.c

…

checksum.c

…

clz_ctz.c

…

clz_tab.c

…

cmdline.c

…

cmpdi2.c

…

compat_audit.c

…

cpu_rmap.c

lib: cpu_rmap: Use pr_warn instead of pr_warning

2019-10-18 15:01:57 +02:00

cpumask.c

…

crc4.c

…

crc7.c

…

crc8.c

…

crc16.c

…

crc32.c

…

crc32defs.h

…

crc32test.c

…

crc64.c

lib: crc64: include <linux/crc64.h> for 'crc64_be'

2020-01-23 11:40:01 -07:00

crc-ccitt.c

…

crc-itu-t.c

…

crc-t10dif.c

…

ctype.c

…

debug_info.c

…

debug_locks.c

…

debugobjects.c

debugobjects: Fix various data races

2020-01-17 15:45:01 +01:00

dec_and_lock.c

…

decompress_bunzip2.c

…

decompress_inflate.c

lib/zlib: add s390 hardware support for kernel zlib_inflate

2020-01-31 10:30:40 -08:00

decompress_unlz4.c

…

decompress_unlzma.c

…

decompress_unlzo.c

…

decompress_unxz.c

…

decompress.c

…

devres.c

remove ioremap_nocache and devm_ioremap_nocache

2020-01-06 09:45:59 +01:00

digsig.c

…

dump_stack.c

dump_stack: avoid the livelock of the dump_lock

2019-11-06 08:47:50 -08:00

dynamic_debug.c

…

dynamic_queue_limits.c

…

earlycpio.c

…

errname.c

printf: add support for printing symbolic error names

2019-10-17 16:23:25 +02:00

error-inject.c

…

errseq.c

…

extable.c

lib/extable.c: add missing prototypes

2019-09-25 17:51:39 -07:00

fault-inject.c

…

fdt_addresses.c

libfdt: include fdt_addresses.c

2020-01-08 16:59:19 +00:00

fdt_empty_tree.c

…

fdt_ro.c

…

fdt_rw.c

…

fdt_strerror.c

…

fdt_sw.c

…

fdt_wip.c

…

fdt.c

…

find_bit_benchmark.c

…

find_bit.c

lib/find_bit.c: uninline helper _find_next_bit()

2020-01-31 10:30:41 -08:00

flex_proportions.c

…

gen_crc32table.c

…

gen_crc64table.c

…

genalloc.c

lib/genalloc.c: rename addr_in_gen_pool to gen_pool_has_addr

2019-12-04 19:44:13 -08:00

generic-radix-tree.c

lib/generic-radix-tree.c: add kmemleak annotations

2019-10-14 15:04:00 -07:00

glob.c

…

globtest.c

…

hexdump.c

lib/hexdump: make print_hex_dump_bytes() a nop on !DEBUG builds

2019-09-25 17:51:39 -07:00

hweight.c

…

idr.c

idr: Fix idr_get_next_ul race with idr_remove

2019-11-01 22:26:34 -04:00

inflate.c

…

interval_tree_test.c

…

interval_tree.c

…

iomap_copy.c

…

iomap.c

…

iommu-helper.c

…

ioremap.c

lib: provide a simple generic ioremap implementation

2019-11-11 21:18:20 +01:00

iov_iter.c

pipe: Fix bogus dereference in iov_iter_alignment()

2019-12-16 12:48:10 -05:00

irq_poll.c

…

irq_regs.c

…

is_single_threaded.c

…

kasprintf.c

…

Kconfig

Merge tag 'trace-v5.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace

2020-02-11 16:39:18 -08:00

Kconfig.debug

Merge tag 'linux-kselftest-5.6-rc1-kunit' of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest

2020-01-29 15:25:34 -08:00

Kconfig.kasan

kasan: support backing vmalloc space with real shadow memory

2019-12-01 12:59:05 -08:00

Kconfig.kgdb

lib/: fix Kconfig indentation

2019-12-07 11:00:19 -08:00

Kconfig.ubsan

…

kfifo.c

Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"

2019-08-30 18:47:15 -07:00

klist.c

…

kobject_uevent.c

…

kobject.c

…

kstrtox.c

…

kstrtox.h

…

libcrc32c.c

…

list_debug.c

…

list_sort.c

…

list-test.c

kunit: allow kunit tests to be loaded as a module

2020-01-09 16:42:29 -07:00

llist.c

…

locking-selftest-hardirq.h

…

locking-selftest-mutex.h

…

locking-selftest-rlock-hardirq.h

…

locking-selftest-rlock-softirq.h

…

locking-selftest-rlock.h

…

locking-selftest-rsem.h

…

locking-selftest-rtmutex.h

…

locking-selftest-softirq.h

…

locking-selftest-spin-hardirq.h

…

locking-selftest-spin-softirq.h

…

locking-selftest-spin.h

…

locking-selftest-wlock-hardirq.h

…

locking-selftest-wlock-softirq.h

…

locking-selftest-wlock.h

…

locking-selftest-wsem.h

…

locking-selftest.c

locking/lockdep: Remove unused @nested argument from lock_release()

2019-10-09 12:46:10 +02:00

lockref.c

…

logic_pio.c

lib: logic_pio: Enforce LOGIC_PIO_INDIRECT region ops are set at registration

2019-11-05 08:45:25 +08:00

lru_cache.c

…

lshrdi3.c

…

Makefile

Merge tag 'trace-v5.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace

2020-02-11 16:39:18 -08:00

memcat_p.c

…

memory-notifier-error-inject.c

…

memregion.c

lib: Uplevel the pmem "region" ida to a global allocator

2019-11-07 15:44:29 +01:00

memweight.c

…

muldi3.c

…

net_utils.c

…

netdev-notifier-error-inject.c

…

nlattr.c

…

nmi_backtrace.c

…

nodemask.c

…

notifier-error-inject.c

…

notifier-error-inject.h

…

objagg.c

…

of-reconfig-notifier-error-inject.c

…

oid_registry.c

…

once.c

…

packing.c

…

parman.c

…

parser.c

…

pci_iomap.c

…

percpu_counter.c

…

percpu_test.c

…

percpu-refcount.c

…

plist.c

…

pm-notifier-error-inject.c

…

radix-tree.c

idr: Fix idr_alloc_u32 on 32-bit systems

2019-11-03 06:36:50 -05:00

random32.c

…

ratelimit.c

…

rbtree_test.c

augmented rbtree: add new RB_DECLARE_CALLBACKS_MAX macro

2019-09-25 17:51:39 -07:00

rbtree.c

…

refcount.c

locking/refcount: Consolidate implementations of refcount_t

2019-11-25 09:15:32 +01:00

rhashtable.c

…

sbitmap.c

sbitmap: only queue kyber's wait callback if not already active

2019-12-20 16:51:54 -07:00

scatterlist.c

lib/scatterlist.c: adjust indentation in __sg_alloc_table

2020-01-31 10:30:40 -08:00

seq_buf.c

seq_buf: Add printing formatted hex dumps

2019-11-14 13:15:12 -05:00

sg_pool.c

…

sg_split.c

…

sha1.c

…

show_mem.c

mm: remove quicklist page table caches

2019-09-24 15:54:09 -07:00

siphash.c

…

smp_processor_id.c

lib/smp_processor_id: Don't use cpumask_equal()

2019-10-09 12:46:10 +02:00

sort.c

lib/sort: Move swap, cmp and cmp_r function types for wider use

2019-11-14 13:15:11 -05:00

stackdepot.c

lib/stackdepot.c: fix global out-of-bounds in stack_slabs

2020-02-21 11:22:15 -08:00

stmp_device.c

…

string_helpers.c

…

string.c

lib/string.c: update match_string() doc-strings with correct behavior

2020-02-21 11:22:15 -08:00

strncpy_from_user.c

lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user()

2020-01-24 09:27:34 -08:00

strnlen_user.c

lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user()

2020-01-24 09:27:34 -08:00

syscall.c

…

test_bitfield.c

…

test_bitmap.c

lib: new testcases for bitmap_parse{_user}

2020-02-04 03:05:27 +00:00

test_blackhole_dev.c

…

test_bpf.c

bpf, testing: Introduce 'gso_linear_no_head_frag' skb_segment test

2019-10-30 16:37:08 +01:00

test_debug_virtual.c

…

test_firmware.c

test_firmware: add support for request_firmware_into_buf

2019-09-04 13:31:28 +02:00

test_hash.c

…

test_hexdump.c

…

test_ida.c

…

test_kasan.c

lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()

2020-01-31 10:30:38 -08:00

test_kmod.c

…

test_list_sort.c

…

test_memcat_p.c

…

test_meminit.c

lib/test_meminit.c: add bulk alloc/free tests

2019-12-04 19:44:13 -08:00

test_module.c

…

test_objagg.c

…

test_overflow.c

…

test_parman.c

…

test_printf.c

Merge tag 'devprop-5.5-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

2019-11-26 19:45:12 -08:00

test_rhashtable.c

…

test_siphash.c

…

test_sort.c

…

test_stackinit.c

…

test_static_key_base.c

…

test_static_keys.c

…

test_string.c

…

test_strscpy.c

…

test_sysctl.c

…

test_ubsan.c

…

test_user_copy.c

usercopy: Avoid soft lockups in test_check_nonzero_user()

2019-10-16 14:56:21 +02:00

test_uuid.c

…

test_vmalloc.c

…

test_xarray.c

XArray: Fix xas_find returning too many entries

2020-01-17 22:33:33 -05:00

test-kstrtox.c

…

test-string_helpers.c

…

textsearch.c

lib: textsearch: fix escapes in example code

2019-10-03 12:12:23 -04:00

timerqueue.c

…

ts_bm.c

…

ts_fsm.c

…

ts_kmp.c

…

ubsan.c

lib/ubsan: don't serialize UBSAN report

2019-12-04 19:44:14 -08:00

ubsan.h

int128: move __uint128_t compiler test to Kconfig

2019-11-17 09:02:42 +08:00

ucmpdi2.c

…

ucs2_string.c

…

usercopy.c

lib: introduce copy_struct_from_user() helper

2019-10-01 15:45:03 +02:00

uuid.c

…

vsprintf.c

rss_stat: add support to detect RSS updates of external mm

2019-12-01 06:29:18 -08:00

win_minmax.c

…

xarray.c

XArray: Fix xas_find returning too many entries

2020-01-17 22:33:33 -05:00

xxhash.c

…