{"push_id":1083373651,"size":1,"distinct_size":0,"ref":"refs/heads/grsec-4.4","head":"2aceb2370eae58b0abd3c0fb072c3df49562f3ec","before":"da6d4169de417a8dfb8d4fd16303ca142b976e24","commits":[{"sha":"2aceb2370eae58b0abd3c0fb072c3df49562f3ec","author":{"email":"be467f0e1be1cd5d65704bcad86a587c7f8efd36@grsecurity.net","name":"Brad Spengler"},"message":"grsec: Apply grsecurity-3.1-4.4.8-201604252206.patch\n\ncommit 5988c8dba8a5da45e35d71f4a8fec34c267258c5\nAuthor: Brad Spengler <spender@grsecurity.net>\nDate:   Mon Apr 25 20:40:53 2016 -0400\n\n    Fix DoS in n_tty_receive_buf_common reported by marcan at:\n    https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222\n    and via lengthy diatribe on Twitter:\n    https://twitter.com/marcan42/status/724740708104474626\n    https://twitter.com/marcan42/status/724740985146609664\n    https://twitter.com/marcan42/status/724741270325760000\n    https://twitter.com/marcan42/status/724742465199050752\n    https://twitter.com/marcan42/status/724745886794833920\n    https://twitter.com/marcan42/status/724749571495075840\n    https://twitter.com/marcan42/status/724746427285409796\n    https://twitter.com/marcan42/status/724743150263095296\n    https://twitter.com/marcan42/status/724757473433808896\n\n    Fix it correctly instead of using the incorrect fix suggested\n    by marcan (aka \"try reading the code next time\")\n    The original code was meant to fix an integer truncation issue\n    that would also have caused a SIZE_OVERFLOW \"DoS\".\n\n drivers/tty/n_tty.c | 9 +++++----\n 1 file changed, 5 insertions(+), 4 deletions(-)\n\ncommit 5459ff57d8987389fa17d5d6f55b70a789347c2f\nAuthor: Brad Spengler <spender@grsecurity.net>\nDate:   Mon Apr 25 19:52:33 2016 -0400\n\n    Avoid overflow in environ_read() caught by SIZE_OVERFLOW,\n    reported by jotik at:\n    https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217\n    patch from Mathias Krause\n\n fs/proc/base.c | 2 +-\n 1 file changed, 1 insertion(+), 1 deletion(-)\n\ncommit 24a5c92e147af1e739e9eeca020c61ad2674e784\nAuthor: Jiri Benc <jbenc@redhat.com>\nDate:   Fri Apr 22 13:09:13 2016 +0200\n\n    cxgbi: fix uninitialized flowi6\n\n    ip6_route_output looks into different fields in the passed flowi6 structure,\n    yet cxgbi passes garbage in nearly all those fields. Zero the structure out\n    first.\n\n    Fixes: fc8d0590d9142 (\"libcxgbi: Add ipv6 api to driver\")\n    Signed-off-by: Jiri Benc <jbenc@redhat.com>\n    Signed-off-by: David S. Miller <davem@davemloft.net>\n\n drivers/scsi/cxgbi/libcxgbi.c | 1 +\n 1 file changed, 1 insertion(+)\n\ncommit ec65caa32652841a5be21d6e73146921af16d7a8\nAuthor: Brad Spengler <spender@grsecurity.net>\nDate:   Wed Apr 20 20:59:43 2016 -0400\n\n    Make /proc/sched_debug only readable by root, mentioned in\n    recent NCC Group paper on Linux containers\n\n kernel/sched/debug.c | 4 ++++\n 1 file changed, 4 insertions(+)\n\nSignature-tree: f62c51f16133d91393f4e4c7e6278d0dafcf2ad2","distinct":false,"url":"https://api.github.com/repos/linux-scraping/linux-grsecurity/commits/2aceb2370eae58b0abd3c0fb072c3df49562f3ec"}]}