Meng Xu d9cb4dc022 isdn/i4l: fetch the ppp_write buffer in one shot ... [ Upstream commit 02388bf87f72e1d47174cd8f81c34443920eb5a0 ] In isdn_ppp_write(), the header (i.e., protobuf) of the buffer is fetched twice from userspace. The first fetch is used to peek at the protocol of the message and reset the huptimer if necessary; while the second fetch copies in the whole buffer. However, given that buf resides in userspace memory, a user process can race to change its memory content across fetches. By doing so, we can either avoid resetting the huptimer for any type of packets (by first setting proto to PPP_LCP and later change to the actual type) or force resetting the huptimer for LCP packets. This patch changes this double-fetch behavior into two single fetches decided by condition (lp->isdn_device < 0 || lp->isdn_channel <0). A more detailed discussion can be found at https://marc.info/?l=linux-kernel&m=150586376926123&w=2 Signed-off-by: Meng Xu <mengxu.gatech@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-10-21 17:09:02 +02:00
..
act2000
capi
divert
gigaset	isdn/gigaset: fix NULL-deref at probe	2017-03-26 12:13:19 +02:00
hardware	ISDN: eicon: silence misleading array-bounds warning	2017-02-01 08:30:52 +01:00
hisax
hysdn
i4l	isdn/i4l: fetch the ppp_write buffer in one shot	2017-10-21 17:09:02 +02:00
icn
isdnloop
mISDN
pcbit
sc
Kconfig
Makefile