2019-09-21 | Jann Horn | floppy: fix usercopy direction Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-08-04 | Jann Horn | sched/fair: Use RCU accessors consistently for ->numa_group Signed-off-by: Jann Horn <jannh@google.com> ...kernel.org/r/20190716152047.14424-3-jannh@google.com |
commit | commitdiff | tree |
2019-08-04 | Jann Horn | sched/fair: Don't free p->numa_faults with concurrent... Signed-off-by: Jann Horn <jannh@google.com> ...kernel.org/r/20190716152047.14424-1-jannh@google.com |
commit | commitdiff | tree |
2019-07-10 | Jann Horn | ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-07-03 | Jann Horn | fs/binfmt_flat.c: make load_flat_shared_library() work ...kernel.org/r/20190524201817.16509-1-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-06-25 | Jann Horn | apparmor: enforce nullbyte at end of tag string Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-06-19 | Jann Horn | ptrace: restore smp_rmb() in __ptrace_may_access() Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-06-11 | Jann Horn | x86/insn-eval: Fix use-after-free access to LDT entry Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-05-10 | Jann Horn | linux/kernel.h: Use parentheses around argument in... Signed-off-by: Jann Horn <jannh@google.com> ...org/r/20190329214652.258477-1-jannh@google.com |
commit | commitdiff | tree |
2019-05-02 | Jann Horn | tracing: Fix buffer_ref pipe ops ...org/r/20190404215925.253531-1-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-04-27 | Jann Horn | device_cgroup: fix RCU imbalance in error case Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-03-27 | Jann Horn | x86/unwind: Add hardcoded ORC entry for NULL Signed-off-by: Jann Horn <jannh@google.com> ...kernel.org/r/20190301031201.7416-2-jannh@google.com |
commit | commitdiff | tree |
2019-03-27 | Jann Horn | x86/unwind: Handle NULL pointer calls better in frame... Signed-off-by: Jann Horn <jannh@google.com> ...kernel.org/r/20190301031201.7416-1-jannh@google.com |
commit | commitdiff | tree |
2019-03-23 | Jann Horn | splice: don't merge into linked buffers Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-03-23 | Jann Horn | tracing/perf: Use strndup_user() instead of buggy open... ...org/r/20190220165443.152385-1-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-03-23 | Jann Horn | mm: page_alloc: fix ref bias in page_frag_alloc() for... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-03-05 | Jann Horn | mm: enforce min addr even if capable() in expand_downwards() Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-02-23 | Jann Horn | netfilter: nf_nat_snmp_basic: add missing length checks... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-02-12 | Jann Horn | kvm: fix kvm_ioctl_create_device() reference counting... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2019-02-12 | Jann Horn | fuse: call pipe_buf_release() under pipe lock Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-11-27 | Jann Horn | reiserfs: propagate errors from fill_with_dentries... ...kernel.org/r/20180802163335.83312-1-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-11-13 | Jann Horn | userns: also map extents in the reverse map to kernel IDs Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-10-13 | Jann Horn | mm/mmap.c: don't clobber partially overlapping VMA... ...kernel.org/r/20181010152736.99475-1-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-10-05 | Jann Horn | mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly ...kernel.org/r/20181001143138.95119-2-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-10-05 | Jann Horn | mm/vmstat.c: fix outdated vmstat_text ...kernel.org/r/20181001143138.95119-1-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-10-05 | Jann Horn | proc: restrict kernel stack dumps to root ...org/r/20180927153316.200286-1-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-10-05 | Jann Horn | bpf: 32-bit RSH verification must truncate input before... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-10-02 | Jann Horn | drm: fix use-after-free read in drm_mode_create_lease_ioctl() Signed-off-by: Jann Horn <jannh@google.com> ...msgid/20181001153117.216923-1-jannh@google.com |
commit | commitdiff | tree |
2018-09-06 | Jann Horn | x86/process: Don't mix user/kernel regs in 64bit __show_regs() Signed-off-by: Jann Horn <jannh@google.com> ...org/r/20180831194151.123586-1-jannh@google.com |
commit | commitdiff | tree |
2018-09-04 | Jann Horn | RDMA/ucma: check fd type in ucma_migrate_id() Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-08-31 | Jann Horn | x86/dumpstack: Don't dump kernel memory based on usermode RIP Signed-off-by: Jann Horn <jannh@google.com> ...org/r/20180828154901.112726-1-jannh@google.com |
commit | commitdiff | tree |
2018-08-30 | Jann Horn | x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do... Signed-off-by: Jann Horn <jannh@google.com> ...kernel.org/r/20180828184033.93712-1-jannh@google.com |
commit | commitdiff | tree |
2018-08-22 | Jann Horn | fork: don't copy inconsistent signal handler state... ...kernel.org/r/20180702145108.73189-1-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-08-22 | Jann Horn | reiserfs: fix broken xattr handling (heap corruption... ...kernel.org/r/20180802151539.5373-1-jannh@google.com Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-08-11 | Jann Horn | sys: don't hold uts_sem while accessing userspace memory Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-08-11 | Jann Horn | userns: move user access out of the mutex Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-07-18 | Jann Horn | mtdchar: fix overflows in adjustment of `count` Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-07-11 | Jann Horn | net/mlx5: fix uaccess beyond "count" in debugfs read... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-07-09 | Jann Horn | IB/mlx5: fix uaccess beyond "count" in debugfs read... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-07-07 | Jann Horn | x86/mtrr: Don't copy out-of-bounds data in mtrr_write Signed-off-by: Jann Horn <jannh@google.com> ...org/r/20180706215003.156702-1-jannh@google.com |
commit | commitdiff | tree |
2018-07-07 | Jann Horn | ibmasm: don't write out of bounds in read handler Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-07-06 | Jann Horn | USB: yurex: fix out-of-bounds uaccess in read handler Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-06-29 | Jann Horn | selinux: move user accesses in selinuxfs out of locked... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-06-26 | Jann Horn | scsi: sg: mitigate read/write abuse Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-06-26 | Jann Horn | netfilter: nf_log: don't hold nf_log_mutex during user... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-06-26 | Jann Horn | netfilter: nf_log: fix uninit read in nf_log_proc_dostring Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-05-11 | Jann Horn | compat: fix 4-byte infoleak via uninitialized struct... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-05-07 | Jann Horn | tee: shm: fix use-after-free via temporarily dropped... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-05-06 | Jann Horn | x86/vdso: Remove unused file Signed-off-by: Jann Horn <jannh@google.com> ...org/r/20180504175935.104085-1-jannh@google.com |
commit | commitdiff | tree |
2018-05-05 | Jann Horn | x86/vdso: Remove unused file Signed-off-by: Jann Horn <jannh@google.com> ...org/r/20180504175935.104085-1-jannh@google.com |
commit | commitdiff | tree |
2018-04-23 | Jann Horn | tcp: don't read out-of-bounds opsize Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-04-20 | Jann Horn | bpf: sockmap remove dead check Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2018-02-20 | Jann Horn | x86/mm: Remove stale comment about KMEMCHECK Signed-off-by: Jann Horn <jannh@google.com> ...org/r/20180219175039.253089-1-jannh@google.com |
commit | commitdiff | tree |
2017-12-27 | Jann Horn | bpf: selftest for late caller stack size increase Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-12-21 | Jann Horn | selftests/bpf: add tests for recent bugfixes Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-12-21 | Jann Horn | bpf: don't prune branches when a scalar is replaced... Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-12-21 | Jann Horn | bpf: force strict alignment checks for stack pointers Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-12-21 | Jann Horn | bpf: fix missing error return in check_stack_boundary() Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-12-21 | Jann Horn | bpf: fix 32-bit ALU op verification Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-12-21 | Jann Horn | bpf: fix incorrect tracking of register size truncation Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-12-21 | Jann Horn | bpf: fix incorrect sign extension in check_alu_op() Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-12-04 | Jann Horn | netfilter: xt_bpf: add overflow checks Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-11-15 | Jann Horn | mm/pagewalk.c: report holes in hugetlb ranges Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2017-04-28 | Jann Horn | KVM: Documentation: remove VM mmap documentation Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2016-08-15 | Jann Horn | android: binder: fix dangling pointer comparison Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2016-07-05 | Jann Horn | orangefs: fix namespace handling Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2016-06-10 | Jann Horn | sched: panic on corrupted stack end Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2016-06-10 | Jann Horn | ecryptfs: forbid opening files without mmap handler Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2016-06-10 | Jann Horn | proc: prevent stacking filesystems on top Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |
2016-04-26 | Jann Horn | bpf: fix double-fdput in replace_map_fd_with_map_ptr() Signed-off-by: Jann Horn <jannh@google.com> |
commit | commitdiff | tree |