1
linux/drivers/s390/block
Sebastian Ott 26cffecf84 [S390] dasd: fix use after free in dbf
Writing to /proc/dasd/statistics while the debug level of the
generic dasd debug entry is set to DBF_DEBUG will lead to an
use after free when accessing the debug entry later.
Since for the format string "%s" in the s390 dbf only a pointer
to the string is stored in the debug feature and the buffer used
here is freed afterwards.

To fix this just remove the debug message.

Signed-off-by: Sebastian Ott <sebott@linux.vnet.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
2010-10-25 16:10:20 +02:00
..
dasd_3990_erp.c [S390] dasd: let recovery cqr inherit flags from failed cqr 2010-10-25 16:10:14 +02:00
dasd_alias.c [S390] dasd: remove uid from devmap 2010-05-17 10:00:16 +02:00
dasd_devmap.c [S390] dasd: tunable missing interrupt handler 2010-08-09 18:12:54 +02:00
dasd_diag.c [S390] cleanup lowcore access from external interrupts 2010-10-25 16:10:19 +02:00
dasd_diag.h [S390] cleanup lowcore access from external interrupts 2010-10-25 16:10:19 +02:00
dasd_eckd.c [S390] dasd fix dump_sense_dbf 2010-10-25 16:10:17 +02:00
dasd_eckd.h [S390] dasd: tunable missing interrupt handler 2010-08-09 18:12:54 +02:00
dasd_eer.c llseek: automatically add .llseek fop 2010-10-15 15:53:27 +02:00
dasd_erp.c
dasd_fba.c [S390] dasd: tunable missing interrupt handler 2010-08-09 18:12:54 +02:00
dasd_fba.h
dasd_genhd.c
dasd_int.h [S390] dasd: tunable missing interrupt handler 2010-08-09 18:12:54 +02:00
dasd_ioctl.c s390/block: kill the big kernel lock 2010-09-26 16:25:51 +02:00
dasd_proc.c [S390] dasd: fix use after free in dbf 2010-10-25 16:10:20 +02:00
dasd.c Merge branch 'for-2.6.37/barrier' of git://git.kernel.dk/linux-2.6-block 2010-10-22 17:07:18 -07:00
dcssblk.c s390/block: kill the big kernel lock 2010-09-26 16:25:51 +02:00
Kconfig
Makefile
xpram.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00