Al Viro f01d35a15f gadgetfs: use-after-free in ->aio_read() ... AIO_PREAD requests call ->aio_read() with iovec on caller's stack, so if we are going to access it asynchronously, we'd better get ourselves a copy - the one on kernel stack of aio_run_iocb() won't be there anymore. function/f_fs.c take care of doing that, legacy/inode.c doesn't... Cc: stable@vger.kernel.org Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>		2015-02-17 22:23:32 -05:00
..
function	gadget/function/f_fs.c: switch to ->{read,write}_iter()	2015-02-17 22:23:31 -05:00
legacy	gadgetfs: use-after-free in ->aio_read()	2015-02-17 22:23:32 -05:00
udc	Merge branch 'debugfs_automount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-17 15:18:19 -08:00
composite.c	usb: gadget: Fix os desc test	2015-01-27 09:34:58 -06:00
config.c
configfs.c	usb: gadget: udc: core: prepend udc_attach_driver with usb_	2014-11-03 10:01:16 -06:00
configfs.h	usb: gadget: OS descriptors: provide interface directory names	2014-06-19 10:06:48 -05:00
epautoconf.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
functions.c	usb: gadget: add a forward pointer from usb_function to its "instance"	2013-01-21 20:52:46 +02:00
Kconfig	usb: gadget: Kconfig: use bool instead of boolean	2015-02-02 14:58:10 -06:00
Makefile	usb: gadget: use $(srctree) instead of $(PWD) for includes	2014-08-29 15:53:46 -05:00
u_f.c	usb: gadget: only GPL drivers in the gadget and phy framework	2014-04-21 14:07:12 -05:00
u_f.h	usb: gadget: FunctionFS: share VLA macros with all usb gadget files	2014-05-14 09:37:27 -05:00
u_os_desc.h	usb: gadget: u_os_desc: helper functions for accessing ext prop buffer	2014-07-10 08:36:51 -05:00
usbstring.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00