Greg Kroah-Hartman 7036251180 tty: fix race in tty_fasync ...

We need to keep the lock held over the call to __f_setown() to
prevent a PID race.

Thanks to Al Viro for pointing out the problem, and to Travis for
making us look here in the first place.

Cc: Eric W. Biederman <ebiederm@xmission.com>
Cc: Al Viro <viro@ZenIV.linux.org.uk>
Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Tavis Ormandy <taviso@google.com>
Cc: Jeff Dike <jdike@addtoit.com>
Cc: Julien Tinnes <jln@google.com>
Cc: Matt Mackall <mpm@selenic.com>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2010-01-20 15:03:31 -08:00

..

agp

Merge branch 'x86-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip

2010-01-16 12:31:42 -08:00

hw_random

virtio: fix section mismatch warnings

2010-01-16 12:15:39 -08:00

ip2

tty: rewrite the ldisc locking

2009-06-11 08:51:01 -07:00

ipmi

ACPI: fix ACPI=n allmodconfig build

2009-12-30 01:24:25 -05:00

mwave

mwave: fix read buffer overflow

2009-09-24 07:21:03 -07:00

pcmcia

tty: const: constify remaining tty_operations

2009-12-11 15:18:03 -08:00

rio

tree-wide: fix assorted typos all over the place

2009-12-04 15:39:55 +01:00

tpm

tpm: autoload tpm_tis based on system PnP IDs

2009-11-03 12:05:50 +11:00

xilinx_hwicap

const: constify remaining file_operations

2009-10-01 16:11:11 -07:00

.gitignore

…

amiserial.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

apm-emulation.c

const: constify remaining file_operations

2009-10-01 16:11:11 -07:00

applicom.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

applicom.h

…

bfin_jtag_comm.c

tty: const: constify remaining tty_operations

2009-12-11 15:18:03 -08:00

bfin-otp.c

const: constify remaining file_operations

2009-10-01 16:11:11 -07:00

briq_panel.c

briq_panel: BKL pushdown

2008-06-20 14:05:55 -06:00

bsr.c

powerpc/BSR: Fix BSR to allow mmap of small BSR on 64k kernel

2009-06-26 14:37:26 +10:00

cd1865.h

…

ChangeLog

…

consolemap.c

consolemap: indentation & braces disagree - reindent

2009-01-06 15:59:30 -08:00

cp437.uni

unicode table for cp437

2008-12-13 11:25:49 -08:00

cs5535_gpio.c

drivers: Remove BKL from cs5535_gpio

2009-10-14 17:36:48 +02:00

cyclades.c

cyclades: fix read buffer overflow

2009-10-01 16:11:16 -07:00

defkeymap.c_shipped

Fix default compose table initialization

2008-03-03 14:53:16 -08:00

defkeymap.map

…

digi1.h

…

digiFep1.h

…

digiPCI.h

…

ds1302.c

rtc: use bcd2bin/bin2bcd

2008-10-20 08:52:41 -07:00

ds1620.c

[ARM] netwinder: clean up GPIO naming

2008-12-13 09:12:07 +00:00

dsp56k.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

dtlk.c

headers: remove sched.h from poll.h

2009-10-04 15:05:10 -07:00

efirtc.c

efirtc: explicitly set llseek to no_llseek

2009-12-16 07:19:59 -08:00

epca.c

tty: const: constify remaining tty_operations

2009-12-11 15:18:03 -08:00

epca.h

epca: use tty_port

2008-07-20 17:12:36 -07:00

epcaconfig.h

…

generic_nvram.c

nvram: Drop the bkl from nvram_llseek()

2009-10-14 17:36:49 +02:00

generic_serial.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

genrtc.c

headers: Fix build after <linux/sched.h> removal

2009-10-13 10:20:16 -07:00

hangcheck-timer.c

drivers/char/: Spelling fixes

2008-02-03 17:11:42 +02:00

hpet.c

sysctl: Drop & in front of every proc_handler.

2009-11-18 08:37:40 -08:00

hvc_beat.c

powerpc/cell: Use correct types in beat files

2009-01-08 16:25:16 +11:00

hvc_console.c

hvc_console: Export (GPL'ed) hvc_remove

2009-12-08 16:02:49 +11:00

hvc_console.h

hvc_console: Provide (un)locked version for hvc_resize()

2009-09-24 15:12:47 +10:00

hvc_irq.c

hvc_console: Call free_irq() only if request_irq() was successful

2009-01-13 14:48:01 +11:00

hvc_iseries.c

drivers/hvc: Add missing __devexit_p()

2009-06-16 14:15:44 +10:00

hvc_iucv.c

const: constify remaining dev_pm_ops

2009-12-15 08:53:25 -08:00

hvc_rtas.c

[POWERPC] hvc_rtas_init() must be __init

2008-02-14 22:11:02 +11:00

hvc_udbg.c

powerpc: udbg-based backend for hvc_console

2008-11-19 16:04:25 +11:00

hvc_vio.c

hvc_console: Add __init and __exit to hvc_vio

2009-08-28 14:24:11 +10:00

hvc_xen.c

Merge branch 'linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jbarnes/pci-2.6

2009-12-11 12:18:16 -08:00

hvcs.c

Merge commit 'origin/master' into next

2009-06-18 11:16:55 +10:00

hvsi.c

powerpc/hvsi: Avoid calculating possibly-invalid address

2009-08-20 10:29:28 +10:00

i8k.c

i8k: Add Dell Vostro systems

2009-01-02 10:28:32 -08:00

isicom.c

tty: isicom: fix deadlock on shutdown

2009-12-11 15:18:07 -08:00

istallion.c

tty: istallion: tty port open/close methods

2009-12-11 15:18:06 -08:00

Kconfig

powerpc/hvc: Driver build breaks with !HVC_CONSOLE

2010-01-15 13:26:13 +11:00

keyboard.c

Input: keyboard - don't override beep with a bell

2009-12-15 21:48:55 -08:00

lp.c

lp: move compat_ioctl handling into lp.c

2009-12-10 22:55:36 +01:00

Makefile

tty: esp: remove broken driver

2009-12-11 15:18:03 -08:00

mbcs.c

[IA64] mbcs: fix printk format warnings

2009-09-15 08:42:00 -07:00

mbcs.h

MBCS: convert dmareadlock to mutex

2008-02-07 08:42:25 -08:00

mem.c

/dev/mem: remove redundant parameter from do_write_kmem()

2009-12-15 08:53:12 -08:00

misc.c

drivers/char/misc.c: use bitmap/bitops functions for dynamic minor number allocation

2009-12-15 08:53:27 -08:00

mmtimer.c

mmtimer: Push BKL down into the ioctl handler

2008-07-17 11:34:49 -07:00

moxa.c

tty: moxa: split open lock

2009-12-11 15:18:08 -08:00

moxa.h

Char: moxa, cleanup rx/tx

2008-04-30 08:29:43 -07:00

mspec.c

tree-wide: fix assorted typos all over the place

2009-12-04 15:39:55 +01:00

mxser.c

tty: mxser: Use the new locking rules to fix setserial properly

2009-12-11 15:18:07 -08:00

mxser.h

mxser: convert large macros to functions

2008-04-30 08:29:49 -07:00

n_hdlc.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

n_r3964.c

tree-wide: fix assorted typos all over the place

2009-12-04 15:39:55 +01:00

n_tty.c

n_tty: move echoctl check and clean up logic

2009-09-19 13:13:34 -07:00

nozomi.c

nozomi: quick fix for the close/close bug

2010-01-20 15:03:27 -08:00

nsc_gpio.c

…

nvram.c

nvram: Fix write beyond end condition; prove to gcc copy is safe

2009-12-11 15:48:23 -08:00

nwbutton.c

…

nwbutton.h

…

nwflash.c

ARM: add missing include to nwflash.c

2009-12-19 23:36:00 +00:00

pc8736x_gpio.c

drivers: Remove BKL from pc8736x_gpio

2009-10-14 17:36:52 +02:00

ppdev.c

ppdev: reduce kernel log spam

2009-06-18 13:03:54 -07:00

ps3flash.c

ps3flash: Always read chunks of 256 KiB, and cache them

2009-06-15 16:47:27 +10:00

pty.c

tty: push the BKL down into the handlers a bit

2009-12-11 15:18:08 -08:00

random.c

random.c: use %pU to print UUIDs

2009-12-15 08:53:33 -08:00

raw.c

Driver-Core: extend devnode callbacks to provide permissions

2009-09-19 12:50:38 -07:00

riscom8_reg.h

…

riscom8.c

tty: riscom8: switch to the tty_port_open API

2009-12-11 15:18:06 -08:00

riscom8.h

tty: add more tty_port fields

2008-07-20 17:12:38 -07:00

rocket_int.h

tty: rocketport uses different port flags to everyone else

2009-01-02 10:19:39 -08:00

rocket.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

rocket.h

tty: rocketport uses different port flags to everyone else

2009-01-02 10:19:39 -08:00

rtc.c

sysctl: Drop & in front of every proc_handler.

2009-11-18 08:37:40 -08:00

scc.h

m68k: atari - Rename "mfp" to "st_mfp"

2009-02-22 09:23:02 -08:00

scx200_gpio.c

drivers: Remove BKL from scx200_gpio

2009-10-14 17:36:53 +02:00

selection.c

tty: rewrite the ldisc locking

2009-06-11 08:51:01 -07:00

ser_a2232.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

ser_a2232.h

…

ser_a2232fw.ax

…

ser_a2232fw.h

…

serial167.c

serial167: fix read buffer overflow

2009-10-01 16:11:16 -07:00

snsc_event.c

byteorder: don't directly include linux/byteorder/generic.h

2008-05-16 12:01:45 -07:00

snsc.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

snsc.h

Convert asm/semaphore.h users to linux/semaphore.h

2008-04-18 22:22:54 -04:00

sonypi.c

sony_pi: Remove the BKL from open and ioctl

2010-01-04 12:31:20 -08:00

specialix_io8.h

tty: add more tty_port fields

2008-07-20 17:12:38 -07:00

specialix.c

specialix.c: convert nested spin_lock_irqsave to spin_lock

2009-07-20 16:38:43 -07:00

stallion.c

tty: stallion: Convert to the tty_port_open/close methods

2009-12-11 15:18:06 -08:00

sx.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

sx.h

Char: char/serial, remove SERIAL_TYPE_NORMAL redefines

2008-02-07 08:42:33 -08:00

sxboards.h

…

sxwindow.h

…

synclink_gt.c

hdlc: convert to netdev_tx_t

2009-09-01 01:13:31 -07:00

synclink.c

hdlc: convert to netdev_tx_t

2009-09-01 01:13:31 -07:00

synclinkmp.c

hdlc: convert to netdev_tx_t

2009-09-01 01:13:31 -07:00

sysrq.c

oom-kill: fix NUMA constraint check with nodemask

2009-12-16 07:19:57 -08:00

tb0219.c

mips: Remove BKL from tb0219

2009-10-14 17:36:53 +02:00

tlclk.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

toshiba.c

tosh: Use non bkl ioctl

2010-01-04 12:31:21 -08:00

tty_audit.c

tty: remove buffer special casing

2009-06-11 08:51:02 -07:00

tty_buffer.c

tty: use the new 'flush_delayed_work()' helper to do ldisc flush

2009-10-14 09:20:41 -07:00

tty_io.c

tty: fix race in tty_fasync

2010-01-20 15:03:31 -08:00

tty_ioctl.c

tree-wide: fix a very frequent spelling mistake

2009-11-09 09:40:54 +01:00

tty_ldisc.c

tty: Push the lock down further into the ldisc code

2009-12-11 15:18:08 -08:00

tty_port.c

tty: tty_port: Add a kref object to the tty port

2009-12-11 15:18:07 -08:00

uv_mmtimer.c

drivers/char/uv_mmtimer.c: add memory mapped RTC driver for UV

2009-09-24 07:21:03 -07:00

vc_screen.c

vc: create vcs(a) devices for consoles

2009-07-20 16:38:43 -07:00

viotape.c

tape: beyond ARRAY_SIZE of viocd_diskinfo

2009-06-02 10:32:34 +10:00

virtio_console.c

virtio: let header files include virtio_ids.h

2009-10-22 16:39:28 +10:30

vme_scc.c

m68k: vme_scc - Kill warn_unused_result warnings

2009-01-12 20:56:38 +01:00

vt_ioctl.c

vt: Fix use of "new" in a struct field

2009-11-19 13:43:06 -08:00

vt.c

vt: make the default cursor shape configurable

2009-12-16 07:19:57 -08:00