iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8a6d508a80
linux/drivers/net/ethernet/marvell
History
Dan Carpenter 294c149a20 skge: potential memory corruption in skge_get_regs() 
The "p" buffer is 0x4000 bytes long.  B3_RI_WTO_R1 is 0x190.  The value
of "regs->len" is in the 1-0x4000 range.  The bug here is that
"regs->len - B3_RI_WTO_R1" can be a negative value which would lead to
memory corruption and an abrupt crash.

Fixes: c3f8be9618 ("[PATCH] skge: expand ethtool debug register dump")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2019-02-01 10:00:22 -08:00
..
mvpp2 cross-tree: phase out dma_zalloc_coherent() 2019-01-08 07:58:37 -05:00
octeontx2 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2019-01-16 05:13:36 +12:00
Kconfig octeontx2-af: Add Marvell OcteonTX2 RVU AF driver 2018-10-10 10:06:01 -07:00
Makefile octeontx2-af: Add Marvell OcteonTX2 RVU AF driver 2018-10-10 10:06:01 -07:00
mv643xx_eth.c net: ethernet: Convert phydev advertize and supported from u32 to link mode 2018-11-11 10:10:01 -08:00
mvmdio.c drivers: net: Remove device_node checks with of_mdiobus_register() 2018-05-16 14:20:36 -04:00
mvneta_bm.c net: mvneta: remove data pointer usage from device_node structure 2018-07-28 22:12:55 -07:00
mvneta_bm.h net: mvneta: Allocate page for the descriptor 2018-07-28 22:12:55 -07:00
mvneta.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2018-12-20 11:53:36 -08:00
pxa168_eth.c cross-tree: phase out dma_zalloc_coherent() 2019-01-08 07:58:37 -05:00
skge.c skge: potential memory corruption in skge_get_regs() 2019-02-01 10:00:22 -08:00
skge.h License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
sky2.c net: marvell: convert to DEFINE_SHOW_ATTRIBUTE 2018-12-03 17:33:44 -08:00
sky2.h License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00