TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
76c3f19c35965ddbd8bf6fa786b68e75ecdbf394
twx-linux/drivers
T
History
Dan Carpenter a6b8dfe9bd Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() 
commit b65a2d8c86 upstream.

The "ie_len" variable is in the 0-255 range and it comes from the
network.  If it's over NDIS_802_11_LENGTH_RATES_EX (16) then that will
lead to memory corruption.

Fixes: 554c0a3abf ("staging: Add rtl8723bs sdio wifi driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20200603101958.GA1845750@mwanda
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-06-30 15:38:09 -04:00
..
accessibility
…
acpi
ACPI: sysfs: Fix pm_profile_attr type
2020-06-30 15:38:07 -04:00
amba
…
android
binder: take read mode of mmap_sem in binder_alloc_free_page()
2020-05-02 17:24:39 +02:00
ata
ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function
2020-06-30 15:38:06 -04:00
atm
…
auxdisplay
…
base
drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish
2020-06-25 15:41:51 +02:00
bcma
…
block
loop: replace kill_bdev with invalidate_bdev
2020-06-30 15:38:02 -04:00
bluetooth
…
bus
…
cdrom
…
char
agp/intel: Reinforce the barrier after GTT updates
2020-06-20 10:25:06 +02:00
clk
clk: bcm2835: Fix return type of bcm2835_register_gate
2020-06-25 15:41:55 +02:00
clocksource
clocksource: dw_apb_timer_of: Fix missing clockevent timers
2020-06-20 10:25:08 +02:00
connector
…
cpufreq
cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once
2020-05-20 08:17:06 +02:00
cpuidle
cpuidle: Fix three reference count leaks
2020-06-20 10:25:14 +02:00
crypto
crypto: omap-sham - add proper load balancing support for multicore
2020-06-25 15:41:56 +02:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
2020-05-27 16:43:07 +02:00
dma-buf
…
edac
…
eisa
…
extcon
extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()'
2020-06-25 15:41:55 +02:00
firewire
…
firmware
efi/esrt: Fix reference count leak in esre_create_sysfs_entry.
2020-06-30 15:38:03 -04:00
fmc
…
fpga
…
fsi
…
gpio
gpio: exar: Fix bad handling for ida_simple_get error path
2020-06-03 08:17:59 +02:00
gpu
drm/radeon: fix fb_div check in ni_init_smc_spll_table()
2020-06-30 15:38:08 -04:00
hid
HID: i2c-hid: add Schneider SCL142ALM to descriptor override
2020-06-11 09:22:58 +02:00
hsi
…
hv
…
hwmon
hwmon: (da9052) Synchronize access with mfd
2020-05-20 08:17:09 +02:00
hwspinlock
…
hwtracing
…
i2c
i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output
2020-06-25 15:41:51 +02:00
ide
…
idle
…
iio
iio: bmp280: fix compensation of humidity
2020-06-25 15:41:48 +02:00
infiniband
RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
2020-06-30 15:38:04 -04:00
input
Input: synaptics - add a second working PNP_ID for Lenovo T470s
2020-06-20 10:24:59 +02:00
iommu
iommu: Fix reference count leak in iommu_group_alloc.
2020-06-03 08:18:03 +02:00
ipack
…
irqchip
…
isdn
…
leds
…
lightnvm
…
macintosh
drivers/macintosh: Fix memleak in windfarm_pm112 driver
2020-06-20 10:25:19 +02:00
mailbox
…
mcb
…
md
md: add feature flag MD_FEATURE_RAID0_LAYOUT
2020-06-25 15:42:02 +02:00
media
media: ov5640: fix use of destroyed mutex
2020-06-20 10:25:18 +02:00
memory
…
memstick
…
message
…
mfd
mfd: wm8994: Fix driver operation if loaded as modules
2020-06-25 15:41:49 +02:00
misc
mei: release me_cl object reference
2020-05-27 16:43:11 +02:00
mmc
mmc: sdhci-esdhc-imx: fix the mask for tuning start point
2020-06-20 10:25:14 +02:00
mtd
mtd: rawnand: tmio: Fix the probe error path
2020-06-25 15:42:01 +02:00
mux
…
net
net: alx: fix race condition in alx_remove
2020-06-30 15:38:06 -04:00
nfc
NFC: st21nfca: add missed kfree_skb() in an error path
2020-06-11 09:22:59 +02:00
ntb
NTB: Fix the default port and peer numbers for legacy drivers
2020-06-25 15:41:50 +02:00
nubus
…
nvdimm
libnvdimm: Fix endian conversion issues
2020-06-11 09:22:55 +02:00
nvme
nvme: refine the Qemu Identify CNS quirk
2020-06-20 10:25:11 +02:00
nvmem
nvmem: qfprom: remove incorrect write support
2020-06-11 09:23:01 +02:00
of
…
oprofile
…
parisc
…
parport
…
pci
PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port
2020-06-25 15:41:54 +02:00
pcmcia
…
perf
…
phy
…
pinctrl
pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()'
2020-06-25 15:41:56 +02:00
platform
platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32()
2020-06-20 10:25:14 +02:00
pnp
…
power
power: supply: smb347-charger: IRQSTAT_D is volatile
2020-06-25 15:41:52 +02:00
powercap
…
pps
…
ps3
…
ptp
…
pwm
pwm: bcm2835: Dynamically allocate base
2020-05-02 17:24:15 +02:00
rapidio
rapidio: fix an error in get_user_pages_fast() error handling
2020-05-27 16:43:12 +02:00
ras
…
regulator
…
remoteproc
remoteproc: Fix IDR initialisation in rproc_alloc()
2020-06-25 15:41:47 +02:00
reset
…
rpmsg
…
rtc
…
s390
s390/qdio: put thinint indicator after early error
2020-06-25 15:41:51 +02:00
sbus
…
scsi
scsi: scsi_devinfo: handle non-terminated strings
2020-06-30 15:37:57 -04:00
sfi
…
sh
…
sn
…
soc
…
spi
spi: dw: Return any value retrieved from the dma_transfer callback
2020-06-20 10:25:14 +02:00
spmi
…
ssb
…
staging
Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()
2020-06-30 15:38:09 -04:00
target
scsi: target/iblock: fix WRITE SAME zeroing
2020-05-05 19:15:52 +02:00
tc
…
tee
…
thermal
thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR
2020-06-25 15:41:51 +02:00
thunderbolt
…
tty
tty: n_gsm: Fix bogus i++ in gsm_data_kick
2020-06-25 15:41:53 +02:00
uio
…
usb
usb: gadget: udc: Potential Oops in error handling code
2020-06-30 15:38:05 -04:00
uwb
…
vfio
vfio/mdev: Fix reference count leak in add_mdev_supported_type
2020-06-25 15:41:56 +02:00
vhost
vhost/vsock: fix packet delivery order to monitoring devices
2020-05-27 16:42:56 +02:00
video
backlight: lp855x: Ensure regulators are disabled on probe failure
2020-06-25 15:41:47 +02:00
virt
…
virtio
…
vlynq
…
vme
…
w1
w1: omap-hdq: cleanup to add missing newline for some dev_dbg
2020-06-20 10:25:20 +02:00
watchdog
watchdog: da9062: No need to ping manually before setting timeout
2020-06-25 15:41:54 +02:00
xen
xen/pvcalls-back: test for errors when calling backend_connect()
2020-06-20 10:25:06 +02:00
zorro
…
Kconfig
…
Makefile
…