refs/heads/android-mediatek-pike-3.10-nougat-mr1-wear-release - kernel/mediatek - Git at Google

commit: c490aca77cb2b1fca54191f7feb34ab45490ead7

[log]
author: David Chu <[email protected]>

Wed Mar 01 01:07:47 2017 -0800
committer: David Chu <[email protected]>

Wed Mar 01 07:56:56 2017 -0800
tree: 88d0cf69a7c91d8faef71b82b6a341d26cba3a44
parent: 6c9c195c0a040d1f5c92b36dcc6026f7d176e6e8 [diff]

M4U: fix security vulnerability

[Detail] no check portID when use copyfromuser

[Solution] check port ID in m4u ioctl when use copyfromuser

CVE-2017-0500 CVE-2017-0501 CVE-2017-0502

Change-Id: I4896b08e483c0738e31d12b542c77d93dfec8ecd

drivers/misc/mediatek/m4u/mt2601/m4u.c[diff]

1 file changed

tree: 88d0cf69a7c91d8faef71b82b6a341d26cba3a44