linux-toradex.git/arch/alpha, branch v2.6.27.62

alpha: fix several security issues

2012-02-11T14:37:38+00:00

commit 21c5977a836e399fc710ff2c5367845ed5c2527f upstream.

Fix several security issues in Alpha-specific syscalls.  Untested, but
mostly trivial.

1. Signedness issue in osf_getdomainname allows copying out-of-bounds
kernel memory to userland.

2. Signedness issue in osf_sysinfo allows copying large amounts of
kernel memory to userland.

3. Typo (?) in osf_getsysinfo bounds minimum instead of maximum copy
size, allowing copying large amounts of kernel memory to userland.

4. Usage of user pointer in osf_wait4 while under KERNEL_DS allows
privilege escalation via writing return value of sys_wait4 to kernel
memory.

Signed-off-by: Dan Rosenberg 
Cc: Richard Henderson 
Cc: Ivan Kokshaysky 
Cc: Matt Turner 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds 
Signed-off-by: Greg Kroah-Hartman 
Signed-off-by: Willy Tarreau

alpha: nautilus - fix compile failure with gcc-4.3

2009-02-02T16:28:08+00:00

commit 70b66cbfd3316b792a855cb9a2574e85f1a63d0f upstream.

init_srm_irq() deals with irq's #16 and above, but size of irq_desc
array on nautilus and some other system types is 16. So gcc-4.3
complains that "array subscript is above array bounds", even though
this function is never called on those systems.

This adds a check for NR_IRQS <= 16, which effectively optimizes
init_srm_irq() code away on problematic platforms.

Thanks to Daniel Drake  for detailed analysis
of the problem.

Signed-off-by: Ivan Kokshaysky 
Cc: Richard Henderson 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds 
Cc: Tobias Klausmann 
Signed-off-by: Greg Kroah-Hartman

Remove attribute((weak)) from sys_pipe/sys_pipe2

2009-01-18T18:35:33+00:00

commit 1134723e96f6e2abcf8bfd7a2d1c96fcc323ef35 upstream.

Remove __attribute__((weak)) from common code sys_pipe implemantation.
IA64, ALPHA, SUPERH (32bit) and SPARC (32bit) have own implemantations
with the same name. Just rename them.
For sys_pipe2 there is no architecture specific implementation.

Cc: Richard Henderson 
Cc: David S. Miller 
Cc: Paul Mundt 
Cc: Tony Luck 
Signed-off-by: Heiko Carstens 
Signed-off-by: Greg Kroah-Hartman

[PATCH] fix osf_getdirents()

2008-08-25T05:18:06+00:00

Return value of filldir callback is just "should we stop here"; it's
not a usable channel for passing error values (i.e. ->readdir() will
forget anything except "is it non-zero").

Signed-off-by: Al Viro

alpha: move include/asm-alpha to arch/alpha/include/asm

2008-08-15T16:19:40+00:00

Sam Ravnborg did the build-test that the direct header file move works,
I'm just committing it.

This is a pure move:

	mkdir arch/alpha/include
	git mv include/asm-alpha arch/alpha/include/asm

with no other changes.

Requested-and-tested-by: Sam Ravnborg 
Cc: Richard Henderson 
Cc: Ivan Kokshaysky 
Signed-off-by: Linus Torvalds

[PATCH] sanitize __user_walk_fd() et.al.

2008-07-27T00:53:34+00:00

* do not pass nameidata; struct path is all the callers want.
* switch to new helpers:
	user_path_at(dfd, pathname, flags, &path)
	user_path(pathname, &path)
	user_lpath(pathname, &path)
	user_path_dir(pathname, &path)  (fail if not a directory)
  The last 3 are trivial macro wrappers for the first one.
* remove nameidata in callers.

Signed-off-by: Al Viro

alpha: use generic show_mem()

2008-07-26T19:00:10+00:00

Remove arch-specific show_mem() in favor of the generic version.

This also removes the following redundant information display:

	- free pages, printed by show_free_areas()
	- free swap pages, printed by show_swap_cache_info()
	- pages in swapcache, printed by show_swap_cache_info()

where show_mem() calls show_free_areas(), which calls
show_swap_cache_info().

Signed-off-by: Johannes Weiner 
Cc: Richard Henderson 
Cc: Ivan Kokshaysky 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

inflate: refactor inflate malloc code

2008-07-25T17:53:28+00:00

Inflate requires some dynamic memory allocation very early in the boot
process and this is provided with a set of four functions:
malloc/free/gzip_mark/gzip_release.

The old inflate code used a mark/release strategy rather than implement
free.  This new version instead keeps a count on the number of outstanding
allocations and when it hits zero, it resets the malloc arena.

This allows removing all the mark and release implementations and unifying
all the malloc/free implementations.

The architecture-dependent code must define two addresses:
 - free_mem_ptr, the address of the beginning of the area in which
   allocations should be made
 - free_mem_end_ptr, the address of the end of the area in which
   allocations should be made. If set to 0, then no check is made on
   the number of allocations, it just grows as much as needed

The architecture-dependent code can also provide an arch_decomp_wdog()
function call.  This function will be called several times during the
decompression process, and allow to notify the watchdog that the system is
still running.  If an architecture provides such a call, then it must
define ARCH_HAS_DECOMP_WDOG so that the generic inflate code calls
arch_decomp_wdog().

Work initially done by Matt Mackall, updated to a recent version of the
kernel and improved by me.

[akpm@linux-foundation.org: coding-style fixes]
Signed-off-by: Thomas Petazzoni 
Cc: Matt Mackall 
Cc: Richard Henderson 
Cc: Ivan Kokshaysky 
Cc: Mikael Starvik 
Cc: Jesper Nilsson 
Cc: Haavard Skinnemoen 
Cc: David Howells 
Cc: Ingo Molnar 
Cc: Thomas Gleixner 
Cc: Andi Kleen 
Cc: "H. Peter Anvin" 
Acked-by: Paul Mundt 
Acked-by: Yoshinori Sato 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

alpha: remove the unused ALPHA_CORE_AGP option

2008-07-24T17:47:22+00:00

The real option is named AGP_ALPHA_CORE.

Reviewed-by: Robert P. J. Day 
Signed-off-by: Adrian Bunk 
Cc: Richard Henderson 
Cc: Ivan Kokshaysky 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

bootmem: replace node_boot_start in struct bootmem_data

2008-07-24T17:47:20+00:00

Almost all users of this field need a PFN instead of a physical address,
so replace node_boot_start with node_min_pfn.

[Lee.Schermerhorn@hp.com: fix spurious BUG_ON() in mark_bootmem()]
Signed-off-by: Johannes Weiner 
Cc: 
Signed-off-by: Lee Schermerhorn 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds