iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Jonathan Cameron f88ecccac4 iio:health:afe4404 Fix timestamp alignment and prevent data leak. 
One of a class of bugs pointed out by Lars in a recent review.
iio_push_to_buffers_with_timestamp assumes the buffer used is aligned
to the size of the timestamp (8 bytes).  This is not guaranteed in
this driver which uses a 40 byte array of smaller elements on the stack.
As Lars also noted this anti pattern can involve a leak of data to
userspace and that indeed can happen here.  We close both issues by
moving to a suitable structure in the iio_priv() data with alignment
explicitly requested.  This data is allocated with kzalloc so no
data can leak appart from previous readings.

Fixes: 87aec56e27ef ("iio: health: Add driver for the TI AFE4404 heart monitor")
Reported-by: Lars-Peter Clausen <lars@metafoo.de>
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
Acked-by: Andrew F. Davis <afd@ti.com>
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
2020-06-14 12:32:22 +01:00
..
accessibility
…
acpi
More ACPI updates for 5.8-rc1
2020-06-10 14:09:08 -07:00
amba
ARM: SoC changes for v5.8
2020-06-04 19:47:11 -07:00
android
mmap locking API: convert mmap_sem API comments
2020-06-09 09:39:14 -07:00
ata
for-5.8/block-2020-06-01
2020-06-02 15:29:19 -07:00
atm
mm: reorder includes after introduction of linux/pgtable.h
2020-06-09 09:39:13 -07:00
auxdisplay
…
base
linux-kselftest-kunit-5.8-rc1
2020-06-09 10:04:47 -07:00
bcma
…
block
block-5.8-2020-06-11
2020-06-11 16:07:33 -07:00
bluetooth
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2020-06-03 16:27:18 -07:00
bus
Char/Misc driver patches for 5.8-rc1
2020-06-07 10:59:32 -07:00
cdrom
Merge branch 'work.sysctl' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2020-06-10 16:05:54 -07:00
char
Merge branch 'work.sysctl' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2020-06-10 16:05:54 -07:00
clk
This time around we have 4 lines of diff in the core framework, removing a
2020-06-10 11:42:19 -07:00
clocksource
clocksource/drivers/timer-riscv: Use per-CPU timer interrupt
2020-06-09 19:11:22 -07:00
connector
connector/cn_proc: Protect send_msg() with a local lock
2020-05-28 10:31:10 +02:00
counter
…
cpufreq
More power management updates for 5.8-rc1
2020-06-10 14:04:39 -07:00
cpuidle
powerpc updates for 5.8
2020-06-05 12:39:30 -07:00
crypto
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2020-06-11 11:02:13 -07:00
dax
device-dax: add memory via add_memory_driver_managed()
2020-06-04 19:06:23 -07:00
dca
…
devfreq
PM / devfreq: Use lockdep asserts instead of manual checks for locked mutex
2020-05-28 18:02:40 +09:00
dio
…
dma
dmaengine updates for v5.8-rc1
2020-06-10 11:03:04 -07:00
dma-buf
DMA reservations: use the new mmap locking API
2020-06-09 09:39:14 -07:00
edac
Merge branches 'edac-i10nm' and 'edac-misc' into edac-updates-for-5.8
2020-06-01 11:39:15 +02:00
eisa
…
extcon
extcon: arizona: Fix runtime PM imbalance on error
2020-05-29 17:36:02 +09:00
firewire
…
firmware
Rebase locking/kcsan to locking/urgent
2020-06-11 20:02:46 +02:00
fpga
Char/Misc driver patches for 5.8-rc1
2020-06-07 10:59:32 -07:00
fsi
…
gnss
…
gpio
USB/PHY driver updates for 5.8-rc1
2020-06-07 09:42:16 -07:00
gpu
amdgpu: a NULL ->mm does not mean a thread is a kthread
2020-06-11 18:17:48 -07:00
greybus
…
hid
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2020-06-10 13:51:47 -07:00
hsi
…
hv
hyperv-next for 5.8
2020-06-03 15:00:05 -07:00
hwmon
hwmon: Add Baikal-T1 PVT sensor driver
2020-05-28 07:59:45 -07:00
hwspinlock
…
hwtracing
Char/Misc driver patches for 5.8-rc1
2020-06-07 10:59:32 -07:00
i2c
This time around we have 4 lines of diff in the core framework, removing a
2020-06-10 11:42:19 -07:00
i3c
…
ide
…
idle
…
iio
iio:health:afe4404 Fix timestamp alignment and prevent data leak.
2020-06-14 12:32:22 +01:00
infiniband
mmap locking API: convert mmap_sem comments
2020-06-09 09:39:14 -07:00
input
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2020-06-10 13:51:47 -07:00
interconnect
More power management updates for 5.8-rc1
2020-06-10 14:04:39 -07:00
iommu
mmap locking API: use coccinelle to convert mmap_sem rwsem call sites
2020-06-09 09:39:14 -07:00
ipack
…
irqchip
clocksource/drivers/timer-riscv: Use per-CPU timer interrupt
2020-06-09 19:11:22 -07:00
isdn
…
leds
LEDs pull request for 5.8-rc1.
2020-06-04 11:03:45 -07:00
lightnvm
for-5.8/block-2020-06-01
2020-06-02 15:29:19 -07:00
macintosh
mm: reorder includes after introduction of linux/pgtable.h
2020-06-09 09:39:13 -07:00
mailbox
mailbox: qcom: Add ipq6018 apcs compatible
2020-06-10 22:43:57 -05:00
mcb
…
md
- Largest change for this cycle is the DM zoned target's metadata
2020-06-05 15:45:03 -07:00
media
mmap locking API: convert mmap_sem comments
2020-06-09 09:39:14 -07:00
memory
Merge branch 'baikal/drivers' into arm/drivers
2020-05-28 14:18:11 +02:00
memstick
…
message
…
mfd
This is the bulk of GPIO changes for the v5.8 kernel cycle.
2020-06-05 14:00:30 -07:00
misc
virtio: features, fixes
2020-06-10 13:42:09 -07:00
mmc
This time around we have 4 lines of diff in the core framework, removing a
2020-06-10 11:42:19 -07:00
most
…
mtd
This pull request contains a single change for UBI:
2020-06-10 13:24:40 -07:00
mux
…
net
virtio: features, fixes
2020-06-10 13:42:09 -07:00
nfc
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2020-06-01 12:00:10 -07:00
ntb
NTB: perf: Fix race condition when run with ntb_test
2020-06-05 20:02:09 -04:00
nubus
…
nvdimm
asm-generic: don't include <linux/mm.h> in cacheflush.h
2020-06-08 11:05:57 -07:00
nvme
block-5.8-2020-06-11
2020-06-11 16:07:33 -07:00
nvmem
nvmem: qfprom: remove incorrect write support
2020-05-27 11:09:26 +02:00
of
Driver core patches for 5.8-rc1
2020-06-07 10:53:36 -07:00
opp
opp: Don't parse icc paths unnecessarily
2020-06-01 13:10:15 +05:30
oprofile
mmap locking API: convert mmap_sem comments
2020-06-09 09:39:14 -07:00
parisc
…
parport
Char/Misc driver patches for 5.8-rc1
2020-06-07 10:59:32 -07:00
pci
s390 updates for the 5.8 merge window
2020-06-08 12:05:31 -07:00
pcmcia
pci-v5.8-changes
2020-06-06 11:01:58 -07:00
perf
arm64 merge window fixes for -rc1
2020-06-11 12:53:23 -07:00
phy
USB: changes for v5.8 merge window
2020-05-25 13:28:20 +02:00
pinctrl
This is the bulk of pin control changes for the v5.8
2020-06-07 16:13:43 -07:00
platform
power supply and reset changes for the v5.8 series
2020-06-10 11:28:35 -07:00
pnp
…
power
power supply and reset changes for the v5.8 series
2020-06-10 11:28:35 -07:00
powercap
powercap: RAPL: remove unused local MSR define
2020-05-25 10:59:29 +02:00
pps
…
ps3
…
ptp
ptp_clock: Let the ADJ_OFFSET interface respect the ADJ_NANO flag for PHC devices.
2020-05-25 17:55:17 -07:00
pwm
…
rapidio
rapidio: convert get_user_pages() --> pin_user_pages()
2020-06-04 19:06:26 -07:00
ras
…
regulator
Merge remote-tracking branch 'regulator/for-5.8' into regulator-linus
2020-06-01 13:01:44 +01:00
remoteproc
remoteproc updates for v5.8
2020-06-08 13:01:08 -07:00
reset
Char/Misc driver patches for 5.8-rc1
2020-06-07 10:59:32 -07:00
rpmsg
remoteproc updates for v5.8
2020-06-08 13:01:08 -07:00
rtc
RTC for 5.8
2020-06-07 16:11:23 -07:00
s390
s390 updates for the 5.8 merge window
2020-06-08 12:05:31 -07:00
sbus
mm: don't include asm/pgtable.h if linux/mm.h is already included
2020-06-09 09:39:13 -07:00
scsi
mm: reorder includes after introduction of linux/pgtable.h
2020-06-09 09:39:13 -07:00
sfi
…
sh
…
siox
…
slimbus
…
soc
remoteproc updates for v5.8
2020-06-08 13:01:08 -07:00
soundwire
…
spi
Char/Misc driver patches for 5.8-rc1
2020-06-07 10:59:32 -07:00
spmi
…
ssb
…
staging
mmap locking API: convert mmap_sem comments
2020-06-09 09:39:14 -07:00
target
SCSI misc on 20200605
2020-06-05 15:11:50 -07:00
tc
…
tee
mmap locking API: use coccinelle to convert mmap_sem rwsem call sites
2020-06-09 09:39:14 -07:00
thermal
…
thunderbolt
USB/PHY driver updates for 5.8-rc1
2020-06-07 09:42:16 -07:00
tty
mmap locking API: convert mmap_sem comments
2020-06-09 09:39:14 -07:00
uio
…
usb
kernel: set USER_DS in kthread_use_mm
2020-06-10 19:14:18 -07:00
vdpa
ifcvf: implement config interrupt in IFCVF
2020-06-06 16:26:47 -04:00
vfio
kernel: better document the use_mm/unuse_mm API contract
2020-06-10 19:14:18 -07:00
vhost
Merge branch 'akpm' (patches from Andrew)
2020-06-11 13:25:53 -07:00
video
mm: don't include asm/pgtable.h if linux/mm.h is already included
2020-06-09 09:39:13 -07:00
virt
…
virtio
virtio_mem: convert device block size into 64bit
2020-06-09 06:42:06 -04:00
visorbus
…
vlynq
…
vme
…
w1
w1: omap-hdq: print dev_err if irq flags are not cleared
2020-05-27 12:18:49 +02:00
watchdog
linux-watchdog 5.8-rc1 tag
2020-06-04 10:50:22 -07:00
xen
Merge branch 'rwonce/rework' of git://git.kernel.org/pub/scm/linux/kernel/git/will/linux
2020-06-10 14:46:54 -07:00
zorro
…
Kconfig
…
Makefile
…