diff options
| author |   Michael Gehring <mg@ebfe.org> | 2012-03-21 01:26:45 +0100 |
|---|---|---|
| committer |   Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2012-04-09 12:10:23 -0700 |
| commit | 871bdea6f8c64517635bec352b8bec6b72a26d80 (patch) | |
| tree | 786a6dede8222338409a05e316cf58435ee97e72 /drivers/tty/tty_buffer.c | |
| parent | pch_uart: Fix duplicate memory release issue (diff) | |
| download | linux-dev-871bdea6f8c64517635bec352b8bec6b72a26d80.tar.xz linux-dev-871bdea6f8c64517635bec352b8bec6b72a26d80.zip | |
tty/vt: handle bad user buffer in {G,P}IO_CMAP ioctl
set_get_cmap() ignored the result of {get,put}_user(), causing ioctl(vt,
{G,P}IO_CMAP, 0xdeadbeef) to silently fail.
Another side effect of this: calling the PIO_CMAP ioctl with an invalid
buffer would zero the default colormap and the palette for all vts (all
colors set to black).
Leave the default colormap intact and return -EFAULT when
reading/writing to the userspace buffer fails.
Signed-off-by: Michael Gehring <mg@ebfe.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/tty/tty_buffer.c')
0 files changed, 0 insertions, 0 deletions