{"push_id":1020448430,"size":1,"distinct_size":1,"ref":"refs/heads/cm-13.0","head":"fe8dace45bbd937b6f5d3743c4475da8ac164316","before":"61e03923a2dad3d63c59afcc091b4de807d6fc5e","commits":[{"sha":"fe8dace45bbd937b6f5d3743c4475da8ac164316","author":{"email":"4b8373d016f277527198385ba72fda0feb5da015@hurleysoftware.com","name":"Peter Hurley"},"message":"tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)\n\nioctl(TIOCGETD) retrieves the line discipline id directly from the\nldisc because the line discipline id (c_line) in termios is untrustworthy;\nuserspace may have set termios via ioctl(TCSETS*) without actually\nchanging the line discipline via ioctl(TIOCSETD).\n\nHowever, directly accessing the current ldisc via tty->ldisc is\nunsafe; the ldisc ptr dereferenced may be stale if the line discipline\nis changing via ioctl(TIOCSETD) or hangup.\n\nWait for the line discipline reference (just like read() or write())\nto retrieve the \"current\" line discipline id.\n\nChange-Id: I7dae813721d4631d84a7d48b7b908e3bc40617cb\nCc: <stable@vger.kernel.org>\nSigned-off-by: Peter Hurley <peter@hurleysoftware.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/CyanogenMod/android_kernel_motorola_msm8960-common/commits/fe8dace45bbd937b6f5d3743c4475da8ac164316"}]}