UBUNTU: Start new release

Ignore: yes
x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)

Don't allow ptrace to set RIP to a value that couldn't happen by
ordinary control flow. There are CPU bugs^Wfeatures that can have
interesting effects if RIP is non-canonical.

I didn't make the corresponding x86_32 change, since x86_32 has no
concept of canonical addresses.

putreg32 doesn't need this fix: value is only 32 bits, so it can't
be non-canonical.

Fixes CVE-2014-4699.  There are arguably still bugs here, but this
fixes the major issue.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
CVE-2014-4699
BugLink: http://bugs.launchpad.net/bugs/1337339
Acked-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
UBUNTU: Ubuntu-3.11.0-24.42

Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
UBUNTU: Merged back Ubuntu-3.11.0-24.42 security release

Merge of security fix for CVE-2014-4699.

Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
UBUNTU: Start new release

Ignore: yes
Revert "x86_64,ptrace: Enforce RIP <= TASK_SIZE_MAX (CVE-2014-4699)"

This reverts commit dff6a181dcb7421fe4e2beed8702b32a1972ef13.

BugLink: http://bugs.launchpad.net/bugs/1337339

This older version of this fix to be replaced with the correct mainline
version.

Acked-by: John Johansen <john.johansen@canonical.com>
Acked-by: Andy Whitcroft <andy.whitcroft@canonical.com>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
ptrace,x86: force IRET path after a ptrace_stop()

The 'sysret' fastpath does not correctly restore even all regular
registers, much less any segment registers or reflags values.  That is
very much part of why it's faster than 'iret'.

Normally that isn't a problem, because the normal ptrace() interface
catches the process using the signal handler infrastructure, which
always returns with an iret.

However, some paths can get caught using ptrace_event() instead of the
signal path, and for those we need to make sure that we aren't going to
return to user space using 'sysret'.  Otherwise the modifications that
may have been done to the register set by the tracer wouldn't
necessarily take effect.

Fix it by forcing IRET path by setting TIF_NOTIFY_RESUME from
arch_ptrace_stop_needed() which is invoked from ptrace_stop().

Signed-off-by: Tejun Heo <tj@kernel.org>
Reported-by: Andy Lutomirski <luto@amacapital.net>
Acked-by: Oleg Nesterov <oleg@redhat.com>
Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
(cherry picked from commit b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a)
CVE-2014-4699
BugLink: http://bugs.launchpad.net/bugs/1337339
Acked-by: John Johansen <john.johansen@canonical.com>
Acked-by: Andy Whitcroft <apw@canonical.com>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
UBUNTU: Ubuntu-3.11.0-26.44

Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
UBUNTU: [Config] add the lowlatency flavours

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: update-from-master -- copy over Build-Depends: if they change

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Start new release

Ignore: yes
Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: rebase to Ubuntu-3.10.0-5.14

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Bump ABI

Ignore: yes
Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: [Config] update Build-Depends: from master

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Lowlatency-3.10.0-5.17

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Start new release

Ignore: yes
Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Bump ABI

Ignore: yes
Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: [Config] update Build-Depends: from master

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Lowlatency-3.11.0-2.1

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: switch Vcs-git: to official repo

Signed-off-by: Andy Whitcroft <apw@canonical.com>