iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/misc
History
Jann Horn a0341fc198 ibmasm: don't write out of bounds in read handler 
This read handler had a lot of custom logic and wrote outside the bounds of
the provided buffer. This could lead to kernel and userspace memory
corruption. Just use simple_read_from_buffer() with a stack buffer.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-07-07 09:59:35 +02:00
..
altera-stapl
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
c2port
kmemcheck: remove annotations
2017-11-15 18:21:04 -08:00
cardreader
for-4.17/block-20180402
2018-04-05 14:27:02 -07:00
cb710
treewide: Use struct_size() for devm_kmalloc() and friends
2018-06-06 11:15:43 -07:00
cxl
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
echo
misc: Remove Blackfin DSP echo support
2018-03-26 15:56:37 +02:00
eeprom
Merge branch 'i2c/for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux
2018-06-14 16:21:46 +09:00
genwqe
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
ibmasm
ibmasm: don't write out of bounds in read handler
2018-07-07 09:59:35 +02:00
lis3lv02d
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
lkdtm
lkdtm: Add missing SPDX-License-Identifier line
2018-03-06 19:18:55 -08:00
mei
mei: discard messages from not connected client during power down.
2018-07-03 13:13:07 +02:00
mic
misc: mic: Release reference count and memory for VOP device
2018-03-15 18:12:01 +01:00
ocxl
ocxl: Fix missing unlock on error in afu_ioctl_enable_p9_wait()
2018-06-05 21:33:57 +10:00
sgi-gru
Char/Misc driver patches for 4.18-rc1
2018-06-05 16:20:22 -07:00
sgi-xp
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
ti-st
misc: ti-st: Replace GFP_ATOMIC with GFP_KERNEL in kim_probe
2018-04-23 13:31:27 +02:00
vmw_vmci
treewide: kmalloc() -> kmalloc_array()
2018-06-12 16:19:22 -07:00
ad525x_dpot-i2c.c
…
ad525x_dpot-spi.c
…
ad525x_dpot.c
misc: ad525x_dpot: macros should not use a trailing semicolon
2017-12-18 16:02:26 +01:00
ad525x_dpot.h
misc: ad525x_dpot: Unnecessary space before function pointer arguments
2017-12-18 15:59:17 +01:00
apds990x.c
misc: apds990x: Missing a blank line after declarations.
2017-12-18 16:02:26 +01:00
apds9802als.c
misc: apds9802als: constify i2c_device_id
2017-08-28 16:55:49 +02:00
aspeed-lpc-ctrl.c
misc: aspeed-lpc-ctrl: Enable FWH and A2H bridge cycles
2018-03-15 18:20:51 +01:00
aspeed-lpc-snoop.c
drivers/misc: (aspeed-lpc-snoop): Add ast2400 to compat
2017-07-17 17:23:16 +02:00
atmel_tclib.c
…
atmel-ssc.c
misc: atmel-ssc: register as sound DAI if #sound-dai-cells is present
2016-12-15 12:13:31 +00:00
bh1770glc.c
misc: bh1770glc: constify attribute_group structures.
2017-08-28 16:55:48 +02:00
cs5535-mfgpt.c
…
ds1682.c
misc: ds1682: Ignore update-in-progress ETC reads
2018-01-09 17:03:57 +01:00
dummy-irq.c
Annotate hardware config module parameters in drivers/misc/
2017-04-20 12:02:32 +01:00
enclosure.c
misc: enclosure: Remove unnecessary error check
2017-12-07 18:45:31 +01:00
fsa9480.c
misc: fsa9480: Add blank line after declarations.
2018-01-09 17:03:57 +01:00
hmc6352.c
misc: hmc6352: constify i2c_device_id
2017-08-28 16:55:49 +02:00
hpilo.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
hpilo.h
misc: hpilo: Use SPDX-License-Identifier
2017-12-07 18:45:31 +01:00
ibmvmc.c
misc: IBM Virtual Management Channel Driver (VMC)
2018-05-14 16:35:42 +02:00
ibmvmc.h
misc: IBM Virtual Management Channel Driver (VMC)
2018-05-14 16:35:42 +02:00
ics932s401.c
misc: ics932s401: open brace should be on the previous line
2017-12-18 16:00:57 +01:00
ioc4.c
misc: ioc4: constify pci_device_id.
2017-08-28 16:55:48 +02:00
isl29003.c
misc: isl29003: Missing a blank line after declarations
2017-12-07 18:45:31 +01:00
isl29020.c
misc: isl29020: constify i2c_device_id
2017-08-28 16:55:49 +02:00
Kconfig
misc: IBM Virtual Management Channel Driver (VMC)
2018-05-14 16:35:42 +02:00
kgdbts.c
misc: kgdbts: Display progress of asynchronous tests
2018-01-25 08:40:17 -06:00
lattice-ecp3-config.c
…
Makefile
misc: IBM Virtual Management Channel Driver (VMC)
2018-05-14 16:35:42 +02:00
pch_phub.c
MISC: add const to bin_attribute structures
2017-08-28 16:55:48 +02:00
pci_endpoint_test.c
Merge branch 'lorenzo/pci/endpoint'
2018-06-06 16:10:30 -05:00
phantom.c
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
pti.c
drivers/misc/intel/pti: Rename the header file to free up the namespace
2017-12-17 12:52:34 +01:00
qcom-coincell.c
ARM: qcom: silence an uninitialized variable warning
2016-05-01 14:20:04 -07:00
spear13xx_pcie_gadget.c
…
sram-exec.c
misc: sram-exec: Use aligned fncpy instead of memcpy
2017-05-18 17:37:52 +02:00
sram.c
treewide: devm_kzalloc() -> devm_kcalloc()
2018-06-12 16:19:22 -07:00
sram.h
misc: sram: Integrate protect-exec reserved sram area type
2017-01-25 11:48:03 +01:00
tifm_7xx1.c
misc: tifm: Remove VLA
2018-04-23 13:31:27 +02:00
tifm_core.c
…
tsl2550.c
misc: tsl2550: Add OF device ID table
2017-04-08 18:22:59 +02:00
vexpress-syscfg.c
treewide: Use struct_size() for kmalloc()-family
2018-06-06 11:15:43 -07:00
vmw_balloon.c
vmw_balloon: fix inflation with batching
2018-07-03 12:58:23 +02:00