linux/drivers/macintosh
Ning Qiang fd97e4ad6d macintosh/adb: fix oob read in do_adb_query() function
In do_adb_query() function of drivers/macintosh/adb.c, req->data is copied
form userland. The parameter "req->data[2]" is missing check, the array
size of adb_handler[] is 16, so adb_handler[req->data[2]].original_address and
adb_handler[req->data[2]].handler_id will lead to oob read.

Cc: stable <stable@kernel.org>
Signed-off-by: Ning Qiang <sohu0106@126.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Acked-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/20220713153734.2248-1-sohu0106@126.com
2022-07-20 22:06:30 +10:00
..
ams macintosh/ams: Remove unneeded result variable 2022-05-04 19:37:45 +10:00
adb-iop.c macintosh/adb-iop: Use big-endian autopoll mask 2021-01-25 13:23:38 +01:00
adb.c macintosh/adb: fix oob read in do_adb_query() function 2022-07-20 22:06:30 +10:00
adbhid.c macintosh/adb: Use swap() to make code cleaner 2022-05-04 19:37:45 +10:00
ans-lcd.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
ans-lcd.h misc: cleanup minor number definitions in c file into miscdevice.h 2020-03-18 12:27:03 +01:00
apm_emu.c
Kconfig macintosh: via-pmu and via-cuda need RTC_LIB 2022-05-22 15:58:30 +10:00
mac_hid.c macintosh/mac_hid.c: simplify subdirectory registration with register_sysctl() 2022-01-22 08:33:35 +02:00
macio_asic.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
macio_sysfs.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
macio-adb.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
Makefile macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled 2022-05-22 15:58:30 +10:00
mediabay.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
rack-meter.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
smu.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
therm_adt746x.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
therm_windtunnel.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
via-cuda.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
via-macii.c isystem: trim/fixup stdarg.h and other headers 2021-08-19 09:02:55 +09:00
via-pmu-backlight.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
via-pmu-event.c
via-pmu-event.h
via-pmu-led.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
via-pmu.c macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled 2022-05-22 15:58:30 +10:00
windfarm_ad7417_sensor.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_core.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_cpufreq_clamp.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_fcu_controls.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_lm75_sensor.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_lm87_sensor.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_max6690_sensor.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_mpu.h macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_pid.c
windfarm_pid.h
windfarm_pm72.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_pm81.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_pm91.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_pm112.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_pm121.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_rm31.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_smu_controls.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_smu_sat.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm_smu_sensors.c macintosh: Prepare cleanup of powerpc's asm/prom.h 2022-05-11 23:06:39 +10:00
windfarm.h