Mikulas Patocka 878b8619f7 Fix memory corruption in console selection ...

Fix an off-by-two memory error in console selection.

The loop below goes from sel_start to sel_end (inclusive), so it writes
one more character.  This one more character was added to the allocated
size (+1), but it was not multiplied by an UTF-8 multiplier.

This patch fixes a memory corruption when UTF-8 console is used and the
user selects a few characters, all of them 3-byte in UTF-8 (for example
a frame line).

When memory redzones are enabled, a redzone corruption is reported.
When they are not enabled, trashing of random memory occurs.

Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2009-01-31 15:51:31 -08:00

..

agp

agp/intel: Fix broken ® symbol in device name.

2008-12-29 10:06:20 +10:00

hw_random

[ARM] omap: ensure OMAP drivers pass a struct device to clk_get()

2009-01-24 11:41:16 +00:00

ip2

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

ipmi

Fix platform drivers that crash on suspend/resume

2008-11-12 17:17:16 -08:00

mwave

mwave: struct device - replace bus_id with dev_name(), dev_set_name()

2009-01-06 10:44:38 -08:00

pcmcia

synclink_cs: Convert to tty_port

2009-01-02 10:19:42 -08:00

rio

rio: Kill off ckmalloc

2009-01-02 10:19:38 -08:00

tpm

Merge branch 'linus' into release

2009-01-09 03:39:43 -05:00

xilinx_hwicap

xilinx_hwicap: remove improper wording in license statement

2008-12-17 11:23:07 -08:00

.gitignore

[MIPS] Remove IT8172-based platforms, ITE 8172G and Globespan IVR support.

2006-10-03 17:59:17 +01:00

amiserial.c

m68k: amiserial - Kill warn_unused_result warnings

2009-01-12 20:56:39 +01:00

apm-emulation.c

APM emulation: Notify about all suspend events, not just APM invoked ones (v2)

2008-07-16 23:27:02 +02:00

applicom.c

applicom.c: fix apparently-broken code in do_ac_read()

2008-10-16 11:21:47 -07:00

applicom.h

…

bfin-otp.c

Blackfin char driver for Blackfin on-chip OTP memory (v3)

2008-04-25 08:04:56 +08:00

briq_panel.c

briq_panel: BKL pushdown

2008-06-20 14:05:55 -06:00

bsr.c

powerpc: Cleanup from l64 to ll64 change: drivers/char

2009-01-13 14:48:00 +11:00

cd1865.h

…

ChangeLog

…

consolemap.c

consolemap: indentation & braces disagree - reindent

2009-01-06 15:59:30 -08:00

cp437.uni

unicode table for cp437

2008-12-13 11:25:49 -08:00

cs5535_gpio.c

Add a bunch of cycle_kernel_lock() calls

2008-06-20 14:05:53 -06:00

cyclades.c

drivers/char/cyclades.c: cy_pci_probe: fix error path

2009-01-02 10:19:43 -08:00

defkeymap.c_shipped

Fix default compose table initialization

2008-03-03 14:53:16 -08:00

defkeymap.map

…

digi1.h

…

digiFep1.h

…

digiPCI.h

…

ds1302.c

rtc: use bcd2bin/bin2bcd

2008-10-20 08:52:41 -07:00

ds1620.c

[ARM] netwinder: clean up GPIO naming

2008-12-13 09:12:07 +00:00

dsp56k.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

dtlk.c

Add a bunch of cycle_kernel_lock() calls

2008-06-20 14:05:53 -06:00

efirtc.c

drivers/char/efirtc.c: removed duplicated #include

2008-08-04 16:59:56 -07:00

epca.c

trivial: fix an -> a typos in documentation and comments

2009-01-06 11:28:07 +01:00

epca.h

epca: use tty_port

2008-07-20 17:12:36 -07:00

epcaconfig.h

…

esp.c

tty_port: Add a port level carrier detect operation

2009-01-02 10:19:38 -08:00

generic_nvram.c

driver/char/generic_nvram: fix banner

2008-06-12 18:05:41 -07:00

generic_serial.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

genrtc.c

genrtc: BKL pushdown

2008-06-20 14:05:57 -06:00

hangcheck-timer.c

drivers/char/: Spelling fixes

2008-02-03 17:11:42 +02:00

hpet.c

x86: correct link to HPET timer specification

2008-11-24 10:05:12 +01:00

hvc_beat.c

powerpc/cell: Use correct types in beat files

2009-01-08 16:25:16 +11:00

hvc_console.c

hvc_console: Remove tty->low_latency

2009-01-16 16:15:16 +11:00

hvc_console.h

powerpc: Make open count variables signed in hvcs/hvsi/hvc_console

2008-12-03 21:04:13 +11:00

hvc_irq.c

hvc_console: Call free_irq() only if request_irq() was successful

2009-01-13 14:48:01 +11:00

hvc_iseries.c

drivers/hvc: Add missing of_node_put

2008-12-03 21:04:09 +11:00

hvc_iucv.c

[S390] hvc_iucv: Special handling of IUCV HVC devices

2009-01-09 12:15:09 +01:00

hvc_rtas.c

[POWERPC] hvc_rtas_init() must be __init

2008-02-14 22:11:02 +11:00

hvc_udbg.c

powerpc: udbg-based backend for hvc_console

2008-11-19 16:04:25 +11:00

hvc_vio.c

drivers/hvc: Add missing of_node_put

2008-12-03 21:04:09 +11:00

hvc_xen.c

hvc_console: Add a hangup notifier for backends

2008-10-22 10:59:54 +11:00

hvcs.c

powerpc: Make open count variables signed in hvcs/hvsi/hvc_console

2008-12-03 21:04:13 +11:00

hvsi.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

i8k.c

i8k: Add Dell Vostro systems

2009-01-02 10:28:32 -08:00

isicom.c

tty: Introduce some close helpers for ports

2009-01-02 10:19:40 -08:00

istallion.c

tty: Introduce some close helpers for ports

2009-01-02 10:19:40 -08:00

Kconfig

powerpc: Fix iseries drivers build failure without CONFIG_VIOPATH

2009-01-08 16:25:14 +11:00

keyboard.c

Input: keyboard - fix potential out of bound access to key_map

2008-10-08 23:45:36 -04:00

lp.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

Makefile

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc

2008-12-28 16:54:33 -08:00

mbcs.c

mbcs: cdev lock_kernel() pushdown

2008-06-20 14:05:48 -06:00

mbcs.h

MBCS: convert dmareadlock to mutex

2008-02-07 08:42:25 -08:00

mem.c

mm: make vread() and vwrite() declaration

2009-01-06 15:59:05 -08:00

misc.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

mmtimer.c

mmtimer: Push BKL down into the ioctl handler

2008-07-17 11:34:49 -07:00

moxa.c

tty_port: Add a port level carrier detect operation

2009-01-02 10:19:38 -08:00

moxa.h

Char: moxa, cleanup rx/tx

2008-04-30 08:29:43 -07:00

mspec.c

mspec: convert nopfn to fault

2008-07-24 10:47:14 -07:00

mxser.c

tty: Introduce some close helpers for ports

2009-01-02 10:19:40 -08:00

mxser.h

mxser: convert large macros to functions

2008-04-30 08:29:49 -07:00

n_hdlc.c

tty: some ICANON magic is in the wrong places

2008-10-13 09:51:44 -07:00

n_r3964.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

n_tty.c

tty: N_TTY SIGIO only works for read

2009-01-02 10:19:40 -08:00

nozomi.c

tty: kref nozomi

2009-01-02 10:19:40 -08:00

nsc_gpio.c

[PATCH] struct path: convert char-drivers

2006-12-08 08:28:44 -08:00

nvram.c

[PATCH] nvram - convert PRINT_PROC to seq_file

2008-11-11 09:56:00 +00:00

nwbutton.c

[PATCH] Char: timers cleanup

2007-02-12 09:48:30 -08:00

nwbutton.h

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

nwflash.c

[ARM] netwinder: clean up GPIO naming

2008-12-13 09:12:07 +00:00

pc8736x_gpio.c

pc8736x_gpio: add support for PC87365 chips

2008-10-20 08:52:40 -07:00

ppdev.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

ps3flash.c

powerpc/ps3: Printing fixups for l64 to ll64 conversion drivers/char

2009-01-16 16:15:14 +11:00

pty.c

pty: Fix documentation

2009-01-12 16:37:00 -08:00

random.c

random: don't try to look at entropy_count outside the lock

2009-01-06 15:59:30 -08:00

raw.c

[PATCH] kill the rest of struct file propagation in block ioctls

2008-10-21 07:49:14 -04:00

riscom8_reg.h

…

riscom8.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

riscom8.h

tty: add more tty_port fields

2008-07-20 17:12:38 -07:00

rocket_int.h

tty: rocketport uses different port flags to everyone else

2009-01-02 10:19:39 -08:00

rocket.c

tty: use port methods for the rocket driver

2009-01-02 10:19:42 -08:00

rocket.h

tty: rocketport uses different port flags to everyone else

2009-01-02 10:19:39 -08:00

rtc.c

RTC: Remove the BKL.

2009-01-08 16:44:03 -07:00

scc.h

[PATCH] m68k: static vs. extern in scc.h

2006-01-12 09:09:00 -08:00

scx200_gpio.c

Add a bunch of cycle_kernel_lock() calls

2008-06-20 14:05:53 -06:00

selection.c

Fix memory corruption in console selection

2009-01-31 15:51:31 -08:00

ser_a2232.c

m68k: ser_a2232 - Kill warn_unused_result warnings

2009-01-12 20:56:39 +01:00

ser_a2232.h

…

ser_a2232fw.ax

…

ser_a2232fw.h

…

serial167.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

snsc_event.c

byteorder: don't directly include linux/byteorder/generic.h

2008-05-16 12:01:45 -07:00

snsc.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

snsc.h

Convert asm/semaphore.h users to linux/semaphore.h

2008-04-18 22:22:54 -04:00

sonypi.c

Merge branch 'misc' into release

2008-11-11 21:14:11 -05:00

specialix_io8.h

tty: add more tty_port fields

2008-07-20 17:12:38 -07:00

specialix.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

stallion.c

tty: Introduce some close helpers for ports

2009-01-02 10:19:40 -08:00

sx.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

sx.h

Char: char/serial, remove SERIAL_TYPE_NORMAL redefines

2008-02-07 08:42:33 -08:00

sxboards.h

…

sxwindow.h

…

synclink_gt.c

synclink_gt: enable RI interrupt

2009-01-15 16:39:37 -08:00

synclink.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

synclinkmp.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

sysrq.c

sysrq: add commentary on why we use the console loglevel over using KERN_EMERG

2009-01-15 16:39:36 -08:00

tb0219.c

Add a bunch of cycle_kernel_lock() calls

2008-06-20 14:05:53 -06:00

tlclk.c

tlckl: BKL pushdown

2008-06-20 14:05:51 -06:00

toshiba.c

toshiba: use ioremap_cached

2008-04-30 23:15:34 +02:00

tty_audit.c

Audit: Log TIOCSTI

2008-12-09 20:32:06 +11:00

tty_buffer.c

tty: split the buffering from tty_io

2008-10-13 09:51:40 -07:00

tty_io.c

tty_open can return to userspace holding tty_mutex

2009-01-27 07:37:15 -08:00

tty_ioctl.c

tty: Fix race in the flush for some ldiscs

2009-01-15 12:48:35 -08:00

tty_ldisc.c

tty: Fix PPP hang under load

2009-01-02 10:19:38 -08:00

tty_port.c

tty: use port methods for the rocket driver

2009-01-02 10:19:42 -08:00

vc_screen.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

viotape.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

virtio_console.c

virtio_console: support console resizing

2008-12-30 09:26:10 +10:30

vme_scc.c

m68k: vme_scc - Kill warn_unused_result warnings

2009-01-12 20:56:38 +01:00

vr41xx_giu.c

drivers/char: use nr_irqs

2008-10-16 16:52:05 +02:00

vt_ioctl.c

tty: Remove some pointless casts

2009-01-02 10:19:40 -08:00

vt.c

Make various things static

2009-01-08 08:31:15 -08:00