iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Jia-Ju Bai 3e1c6846b9 net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() 
The value adapter->rss_conf is stored in DMA memory, and it is assigned
to rssConf, so rssConf->indTableSize can be modified at anytime by
malicious hardware. Because rssConf->indTableSize is assigned to n,
buffer overflow may occur when the code "rssConf->indTable[n]" is
executed.

To fix this possible bug, n is checked after being used.

Signed-off-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2020-06-01 11:52:59 -07:00
..
accessibility
…
acpi
ACPI: EC: PM: Avoid flushing EC work when EC GPE is inactive
2020-05-18 13:15:13 +02:00
amba
amba: Initialize dma_parms for amba devices
2020-04-28 17:44:34 +02:00
android
Merge 5.6-rc7 into char-misc-next
2020-03-23 07:59:38 +01:00
ata
ata: sata_inic162x fix a spelling issue
2020-04-23 09:59:30 -06:00
atm
docs: networking: convert iphase.txt to ReST
2020-04-28 14:39:47 -07:00
auxdisplay
Merge 5.6-rc7 into char-misc-next
2020-03-23 07:59:38 +01:00
base
regmap: provide helpers for simple bit operations
2020-06-01 11:35:18 -07:00
bcma
…
block
tcp: add tcp_sock_set_quickack
2020-05-28 11:11:45 -07:00
bluetooth
Bluetooth: hci_qca: Fix QCA6390 memdump failure
2020-06-01 08:07:33 +02:00
bus
bus: mhi: core: Fix some error return code
2020-05-15 16:32:20 +02:00
cdrom
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
char
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-05-24 13:47:27 -07:00
clk
clk: qcom: gcc: Fix parent for gpll0_out_even
2020-05-26 17:15:06 -07:00
clocksource
clocksource/drivers/timer-vf-pit: Add missing parenthesis
2020-04-05 09:24:58 +02:00
connector
…
counter
counter: 104-quad-8: Add lock guards - generic interface
2020-04-19 17:50:00 +01:00
cpufreq
cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once
2020-04-27 10:30:11 +02:00
cpuidle
Merge branch 'pm-cpuidle'
2020-04-10 11:32:22 +02:00
crypto
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-05-31 17:48:46 -07:00
dax
device-dax: don't leak kernel memory to user space after unloading kmem
2020-05-23 10:26:31 -07:00
dca
…
devfreq
PM / devfreq: Fix handling dev_pm_qos_remove_request result
2020-03-25 08:35:03 +09:00
dio
dio: Fix dio_bus_match() kerneldoc
2020-03-09 11:12:19 +01:00
dma
dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
2020-05-19 22:26:01 +05:30
dma-buf
dma-buf: fix documentation build warnings
2020-04-30 19:47:39 +05:30
edac
Merge branch 'perf-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2020-03-30 16:40:08 -07:00
eisa
.gitignore: add SPDX License Identifier
2020-03-25 11:50:48 +01:00
extcon
Char/Misc driver patches for 5.7-rc1
2020-04-03 13:22:40 -07:00
firewire
…
firmware
EFI fixes for v5.7-rc6:
2020-05-22 20:06:25 +02:00
fpga
fpga: dfl: pci: fix return value of cci_pci_sriov_configure
2020-03-30 20:45:30 -07:00
fsi
…
gnss
…
gpio
gpio: fix locking open drain IRQ lines
2020-05-29 14:01:49 +02:00
gpu
drm fixes for 5.7 final
2020-05-29 12:32:46 -07:00
greybus
…
hid
HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A keyboard-dock
2020-05-04 11:24:58 +02:00
hsi
…
hv
hyperv-fixes for 5.7-rc4
2020-04-27 13:28:27 -07:00
hwmon
hwmon: (da9052) Synchronize access with mfd
2020-05-13 10:06:09 -07:00
hwspinlock
hwspinlock: hwspinlock_internal.h: Replace zero-length array with flexible-array member
2020-03-25 22:30:46 -07:00
hwtracing
coresight: cti: remove incorrect NULL return check
2020-05-15 16:32:20 +02:00
i2c
i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()'
2020-05-15 11:23:49 +02:00
i3c
i3c: convert to use i2c_new_client_device()
2020-03-29 10:35:50 +02:00
ide
drivers/ide: Fix build regression.
2020-04-04 18:07:59 -07:00
idle
Merge branch 'perf-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2020-03-30 16:40:08 -07:00
iio
iio: sca3000: Remove an erroneous 'get_device()'
2020-05-10 10:53:36 +01:00
infiniband
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-05-31 17:48:46 -07:00
input
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2020-05-28 12:41:11 -07:00
interconnect
interconnect: qcom: Move the static keyword to the front of declaration
2020-04-29 13:11:44 +02:00
iommu
iommu: Fix reference count leak in iommu_group_alloc.
2020-05-29 15:27:50 +02:00
ipack
ipack: tpci200: fix error return code in tpci200_register()
2020-05-15 16:32:20 +02:00
irqchip
Merge branch 'irq/gic-v4.1-fixes-5.7' into irq/irqchip-5.7
2020-04-17 08:59:55 +01:00
isdn
mISDN: make dmril and dmrim static
2020-04-16 13:52:31 -07:00
leds
leds: core: Fix warning message when init_data
2020-04-06 23:12:08 +02:00
lightnvm
for-5.7/drivers-2020-03-29
2020-03-30 11:43:51 -07:00
macintosh
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
mailbox
mailbox: imx: add SCU MU support
2020-03-19 23:04:32 -05:00
mcb
…
md
- Document DM integrity allow_discard feature that was added during
2020-04-30 16:45:08 -07:00
media
bpf: Implement CAP_BPF
2020-05-15 17:29:41 +02:00
memory
ARM: driver updates
2020-04-03 15:05:35 -07:00
memstick
…
message
scsi: message: fusion: Replace zero-length array with flexible-array member
2020-03-26 22:40:47 -04:00
mfd
mfd: intel-lpss: Fix Intel Elkhart Lake LPSS I2C input clock
2020-03-30 07:35:28 +01:00
misc
misc: rtsx: Add short delay after exit from ASPM
2020-05-22 13:27:38 +02:00
mmc
mmc: block: Fix use-after-free issue for rpmb
2020-05-25 10:45:17 +02:00
most
most: core: use function subsys_initcall()
2020-04-28 15:04:09 +02:00
mtd
This pull request contains the following bug fixes for MTD:
2020-05-20 13:23:55 -07:00
mux
…
net
net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss()
2020-06-01 11:52:59 -07:00
nfc
NFC: st21nfca: add missed kfree_skb() in an error path
2020-05-29 17:04:14 -07:00
ntb
pci-v5.7-changes
2020-04-03 14:25:02 -07:00
nubus
…
nvdimm
libnvdimm for 5.7
2020-04-08 21:03:40 -07:00
nvme
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-05-31 17:48:46 -07:00
nvmem
nvmem: core: remove nvmem_sysfs_get_groups()
2020-03-25 19:23:49 +01:00
of
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-04-25 20:18:53 -07:00
opp
opp: Manage empty OPP tables with clk handle
2020-04-13 16:14:55 +05:30
oprofile
…
parisc
parisc: Replace setup_irq() by request_irq()
2020-04-05 22:05:23 +02:00
parport
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
pci
PCI: Move Apex Edge TPU class quirk to fix BAR assignment
2020-04-14 19:16:51 -05:00
pcmcia
pcmcia: remove some unused space characters
2020-03-31 18:48:22 +02:00
perf
arm64 updates for 5.7:
2020-03-31 10:05:01 -07:00
phy
phy: qualcomm: usb-hs-28nm: Prepare clocks in init
2020-04-30 12:10:49 +05:30
pinctrl
pinctrl: qcom: Add affinity callbacks to msmgpio IRQ chip
2020-05-12 14:29:29 +02:00
platform
chrome-platform fixes for v5.7-rc5
2020-05-06 16:40:14 -07:00
pnp
…
power
drivers: Remove inclusion of vermagic header
2020-04-21 13:27:37 -07:00
powercap
Merge branch 'perf-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2020-03-30 16:40:08 -07:00
pps
…
ps3
powerpc/ps3: Remove an unneeded NULL check
2020-04-03 00:09:59 +11:00
ptp
ptp_clock: Let the ADJ_OFFSET interface respect the ADJ_NANO flag for PHC devices.
2020-05-25 17:55:17 -07:00
pwm
pwm: pca9685: Fix PWM/GPIO inter-operation
2020-04-03 21:41:42 +02:00
rapidio
rapidio: fix an error in get_user_pages_fast() error handling
2020-05-23 10:26:31 -07:00
ras
…
regulator
regulator: Revert "Use driver_deferred_probe_timeout for regulator_init_complete_work"
2020-04-29 19:57:45 +02:00
remoteproc
remoteproc fixes for v5.7
2020-04-23 09:28:15 -07:00
reset
…
rpmsg
rpmsg: pull in slab.h
2020-04-17 06:05:29 -04:00
rtc
- New Drivers
2020-04-07 19:48:52 -07:00
s390
s390/net: remove pm support from iucv drivers
2020-05-19 12:48:39 -07:00
sbus
misc: move FLASH_MINOR into miscdevice.h and fix conflicts
2020-03-18 12:27:04 +01:00
scsi
scsi: pm: Balance pm_only counter of request queue during system resume
2020-05-11 19:43:25 -04:00
sfi
…
sh
…
siox
…
slimbus
slimbus: ngd: add v2.1.0 compatible
2020-03-12 16:51:15 +01:00
soc
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-05-31 17:48:46 -07:00
soundwire
Char/Misc driver patches for 5.7-rc1
2020-04-03 13:22:40 -07:00
spi
sound updates for 5.7-rc1
2020-04-02 15:50:04 -07:00
spmi
…
ssb
ssb: scan: fix block comments coding style issues
2020-04-28 12:02:22 +03:00
staging
One batch of changes, containing:
2020-05-26 20:17:35 -07:00
target
ipv4: add ip_sock_set_freebind
2020-05-28 11:11:45 -07:00
tc
…
tee
ARM: driver updates
2020-04-03 15:05:35 -07:00
thermal
- Convert tsens configuration DT binding to yaml (Rajeshwari)
2020-04-07 20:00:16 -07:00
thunderbolt
thunderbolt: Check return value of tb_sw_read() in usb4_switch_op()
2020-04-28 19:00:59 +02:00
tty
tty: serial: add missing spin_lock_init for SiFive serial console
2020-05-15 14:55:10 +02:00
uio
uio: uio_pdrv_genirq: use new devm_uio_register_device() function
2020-03-18 12:34:10 +01:00
usb
USB: gadget: fix illegal array access in binding with UDC
2020-05-15 15:42:17 +02:00
vdpa
vdpasim: remove unused variable 'ret'
2020-05-11 06:44:12 -04:00
vfio
vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
2020-04-23 12:10:01 -06:00
vhost
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2020-05-24 13:47:27 -07:00
video
drm fixes for 5.7-rc1
2020-04-07 20:24:34 -07:00
virt
virt: vbox: Use fallthrough;
2020-03-19 07:41:03 +01:00
virtio
virtio-balloon: Avoid using the word 'report' when referring to free page hinting
2020-04-17 06:05:30 -04:00
visorbus
…
vlynq
…
vme
…
w1
…
watchdog
watchdog: sp805: fix restart handler
2020-04-08 11:18:38 +02:00
xen
xen: branch for v5.7-rc2
2020-04-17 10:35:17 -07:00
zorro
SPDX patches for 5.7-rc1.
2020-04-03 13:12:26 -07:00
Kconfig
virtio: fixes, vdpa
2020-04-08 10:51:53 -07:00
Makefile
virtio: fixes, vdpa
2020-04-08 10:51:53 -07:00