[linux] 01/01: unix: Fix ABI change for CVE-2013-4312

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

carnil pushed a commit to branch wheezy-security
in repository linux.

commit 038f7cab33ef674cb20e806d89df13d2b6f00d41
Author: Ben Hutchings <ben at decadent.org.uk>
Date:   Sun Jan 17 16:39:58 2016 +0000

    unix: Fix ABI change for CVE-2013-4312
---
 ...unix-fix-abi-change-for-cve-2013-4312-fix.patch | 33 ++++++++++++++++++++++
 debian/patches/series                              |  1 +
 2 files changed, 34 insertions(+)

diff --git a/debian/patches/debian/unix-fix-abi-change-for-cve-2013-4312-fix.patch b/debian/patches/debian/unix-fix-abi-change-for-cve-2013-4312-fix.patch
new file mode 100644
index 0000000..a4a8293
--- /dev/null
+++ b/debian/patches/debian/unix-fix-abi-change-for-cve-2013-4312-fix.patch
@@ -0,0 +1,33 @@
+From: Ben Hutchings <ben at decadent.org.uk>
+Date: Sun, 17 Jan 2016 15:55:02 +0000
+Subject: unix: Fix ABI change for CVE-2013-4312
+Forwarded: not-needed
+
+The fix for CVE-2013-4312 added a new structure member,
+user_struct::unix_inflight.  As this is always allocated in
+kernel/user.c and the new member is only used by af_unix which is also
+built-in, we can safely add new members at the end.  So move it to the
+end and hide it from genksyms.
+
+---
+--- a/include/linux/sched.h
++++ b/include/linux/sched.h
+@@ -830,7 +830,6 @@ struct user_struct {
+ 	unsigned long mq_bytes;	/* How many bytes can be allocated to mqueue? */
+ #endif
+ 	unsigned long locked_shm; /* How many pages of mlocked shm ? */
+-	unsigned long unix_inflight;	/* How many files in flight in unix sockets */
+ 
+ #ifdef CONFIG_KEYS
+ 	struct key *uid_keyring;	/* UID specific keyring */
+@@ -844,6 +843,10 @@ struct user_struct {
+ #ifdef CONFIG_PERF_EVENTS
+ 	atomic_long_t locked_vm;
+ #endif
++
++#ifndef __GENKSYMS__
++	unsigned long unix_inflight;	/* How many files in flight in unix sockets */
++#endif
+ };
+ 
+ extern int uids_sysfs_init(void);
diff --git a/debian/patches/series b/debian/patches/series
index 1132f2f..9a176c7 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1194,3 +1194,4 @@ bugfix/all/usb-serial-visor-fix-crash-on-detecting-device-without-write_urbs.pat
 bugfix/all/sctp-prevent-soft-lockup-when-sctp_accept-is-called-.patch
 bugfix/all/tty-fix-unsafe-ldisc-reference-via-ioctl-tiocgetd.patch
 bugfix/all/unix-properly-account-for-FDs-passed-over-unix-socke.patch
+debian/unix-fix-abi-change-for-cve-2013-4312-fix.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git