Dan Carpenter 294c149a20 skge: potential memory corruption in skge_get_regs() ...

The "p" buffer is 0x4000 bytes long.  B3_RI_WTO_R1 is 0x190.  The value
of "regs->len" is in the 1-0x4000 range.  The bug here is that
"regs->len - B3_RI_WTO_R1" can be a negative value which would lead to
memory corruption and an abrupt crash.

Fixes: c3f8be961808 ("[PATCH] skge: expand ethtool debug register dump")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2019-02-01 10:00:22 -08:00

..

mvpp2

cross-tree: phase out dma_zalloc_coherent()

2019-01-08 07:58:37 -05:00

octeontx2

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2019-01-16 05:13:36 +12:00

Kconfig

octeontx2-af: Add Marvell OcteonTX2 RVU AF driver

2018-10-10 10:06:01 -07:00

Makefile

octeontx2-af: Add Marvell OcteonTX2 RVU AF driver

2018-10-10 10:06:01 -07:00

mv643xx_eth.c

net: ethernet: Convert phydev advertize and supported from u32 to link mode

2018-11-11 10:10:01 -08:00

mvmdio.c

drivers: net: Remove device_node checks with of_mdiobus_register()

2018-05-16 14:20:36 -04:00

mvneta_bm.c

net: mvneta: remove data pointer usage from device_node structure

2018-07-28 22:12:55 -07:00

mvneta_bm.h

net: mvneta: Allocate page for the descriptor

2018-07-28 22:12:55 -07:00

mvneta.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2018-12-20 11:53:36 -08:00

pxa168_eth.c

cross-tree: phase out dma_zalloc_coherent()

2019-01-08 07:58:37 -05:00

skge.c

skge: potential memory corruption in skge_get_regs()

2019-02-01 10:00:22 -08:00

skge.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

sky2.c

net: marvell: convert to DEFINE_SHOW_ATTRIBUTE

2018-12-03 17:33:44 -08:00

sky2.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00