iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/char
History
Xie Yongji 9e2b8368b2 virtio_console: Assure used length from device is limited 
[ Upstream commit d00d8da5869a2608e97cfede094dfc5e11462a46 ]

The buf->len might come from an untrusted device. This
ensures the value would not exceed the size of the buffer
to avoid data corruption or loss.

Signed-off-by: Xie Yongji <xieyongji@bytedance.com>
Acked-by: Jason Wang <jasowang@redhat.com>
Link: https://lore.kernel.org/r/20210525125622.1203-1-xieyongji@bytedance.com
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-07-20 16:21:14 +02:00
..
agp
parisc: parisc-agp requires SBA IOMMU driver
2021-04-16 11:59:07 +02:00
hw_random
hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled
2020-01-04 13:39:15 +01:00
ipmi
ipmi/watchdog: Stop watchdog timer when the current action is 'none'
2021-07-20 16:21:09 +02:00
mwave
char/mwave: fix potential Spectre v1 vulnerability
2019-01-31 08:12:34 +01:00
pcmcia
char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()
2021-07-20 16:21:04 +02:00
tpm
tpm: ibmvtpm: Wait for buffer to be set before proceeding
2020-10-01 20:40:09 +02:00
xilinx_hwicap
…
xillybus
char: xillybus: Fix spelling mistake and comment
2016-08-31 14:47:54 +02:00
apm-emulation.c
…
applicom.c
applicom: Fix potential Spectre v1 vulnerabilities
2019-03-13 14:04:54 -07:00
applicom.h
…
bfin-otp.c
miscdevice: Use module_misc_device() macro
2016-08-31 14:12:35 +02:00
bsr.c
…
ds1302.c
…
ds1620.c
…
dsp56k.c
dsp56k: prevent a harmless underflow
2016-07-14 16:21:53 +09:00
dtlk.c
…
efirtc.c
…
generic_nvram.c
…
hangcheck-timer.c
…
hpet.c
char: hpet: add checks after calling ioremap
2021-06-03 08:23:31 +02:00
Kconfig
tty: mark Siemens R3964 line discipline as BROKEN
2019-04-17 08:36:44 +02:00
lp.c
char: lp: fix possible integer overflow in lp_setup()
2017-05-25 15:44:30 +02:00
Makefile
RTC for 4.8
2016-08-05 09:48:22 -04:00
mbcs.c
…
mbcs.h
…
mem.c
/dev/mem: Bail out upon SIGKILL.
2019-10-05 12:30:35 +02:00
misc.c
…
mmtimer.c
…
mspec.c
…
nsc_gpio.c
…
nvram.c
…
nwbutton.c
…
nwbutton.h
…
nwflash.c
…
pc8736x_gpio.c
…
powernv-op-panel.c
powerpc/powernv: Add driver for operator panel on FSP machines
2016-06-29 17:33:46 +10:00
ppdev.c
ppdev: fix PPGETTIME/PPSETTIME ioctls
2019-12-21 10:42:07 +01:00
ps3flash.c
…
random.c
random: fix the RNDRESEEDCRNG ioctl
2021-03-03 17:44:32 +01:00
raw.c
…
rtc.c
…
scx200_gpio.c
…
snsc_event.c
…
snsc.c
snsc: check return value of class_create
2016-08-31 14:47:54 +02:00
snsc.h
…
sonypi.c
fs: Replace current_fs_time() with current_time()
2016-09-27 21:06:22 -04:00
tb0219.c
mips: separate extable.h, switch module.h to it
2016-10-05 18:36:18 -04:00
tile-srom.c
tile-srom: avoid krealloc(... __GFP_ZERO) pattern
2016-08-30 14:45:50 +02:00
tlclk.c
drivers: char: tlclk.c: Avoid data race between init and interrupt handler
2020-10-01 20:40:12 +02:00
toshiba.c
…
ttyprintk.c
ttyprintk: Add TTY hangup callback.
2021-05-22 10:40:25 +02:00
uv_mmtimer.c
…
virtio_console.c
virtio_console: Assure used length from device is limited
2021-07-20 16:21:14 +02:00