TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ba20e67aee81bf01dc6154e91bcfee431f1bb678
twx-linux/drivers
T
History
Jann Horn ba20e67aee ibmasm: don't write out of bounds in read handler 
commit a0341fc198 upstream.

This read handler had a lot of custom logic and wrote outside the bounds of
the provided buffer. This could lead to kernel and userspace memory
corruption. Just use simple_read_from_buffer() with a stack buffer.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-07-17 11:31:42 +02:00
..
accessibility
…
acpi
ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c
2018-05-30 07:49:11 +02:00
amba
ARM: amba: Don't read past the end of sysfs "driver_override" buffer
2018-05-02 07:53:42 -07:00
android
binder: add missing binder_unlock()
2018-02-28 10:17:23 +01:00
ata
libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk
2018-07-03 11:21:26 +02:00
atm
atm: zatm: fix memcmp casting
2018-07-03 11:21:24 +02:00
auxdisplay
…
base
driver core: Don't ignore class_dir_create_and_add() failure.
2018-07-03 11:21:25 +02:00
bcma
…
block
drbd: fix access after free
2018-07-11 16:03:48 +02:00
bluetooth
Bluetooth: hci_qca: Avoid missing rampatch failure with userspace fw loader
2018-07-03 11:21:28 +02:00
bus
bus: brcmstb_gisb: correct support for 64-bit address output
2018-04-13 19:50:05 +02:00
cdrom
cdrom: do not call check_disk_change() inside cdrom_open()
2018-05-30 07:49:13 +02:00
char
ipmi:bt: Set the timeout before doing a capabilities check
2018-07-03 11:21:28 +02:00
clk
clk: samsung: exynos3250: Fix PLL rates
2018-05-30 07:49:16 +02:00
clocksource
clocksource/drivers/fsl_ftm_timer: Fix error return checking
2018-05-30 07:49:01 +02:00
connector
…
cpufreq
cpufreq: Fix new policy initialization during limits updates via sysfs
2018-07-03 11:21:26 +02:00
cpuidle
cpuidle: powernv: Fix promotion from snooze if next state disabled
2018-07-03 11:21:29 +02:00
crypto
crypto: vmx - Remove overly verbose printk from AES init routines
2018-06-16 09:54:27 +02:00
dca
…
devfreq
…
dio
…
dma
dmaengine: usb-dmac: fix endless loop in usb_dmac_chan_terminate_all()
2018-06-06 16:46:22 +02:00
dma-buf
…
edac
EDAC, mv64x60: Fix an error handling path
2018-04-13 19:50:23 +02:00
eisa
…
extcon
…
firewire
firewire-ohci: work around oversized DMA reads on JMicron controllers
2018-05-30 07:48:52 +02:00
firmware
firmware: dmi_scan: Fix handling of empty DMI strings
2018-05-30 07:48:56 +02:00
fmc
…
fpga
…
gpio
gpio: No NULL owner
2018-06-16 09:54:26 +02:00
gpu
drm: set FMODE_UNSIGNED_OFFSET for drm files
2018-06-13 16:15:27 +02:00
hid
HID: debug: check length before copy_to_user()
2018-07-11 16:03:50 +02:00
hsi
HSI: ssi_protocol: double free in ssip_pn_xmit()
2018-03-24 10:58:42 +01:00
hv
…
hwmon
hwmon: (pmbus/adm1275) Accept negative page register values
2018-05-30 07:49:13 +02:00
hwspinlock
…
hwtracing
hwtracing: stm: fix build error on some arches
2018-06-06 16:46:23 +02:00
i2c
i2c: rcar: fix resume by always initializing registers before transfer
2018-07-11 16:03:47 +02:00
ide
cdrom: do not call check_disk_change() inside cdrom_open()
2018-05-30 07:49:13 +02:00
idle
idle: i7300: add PCI dependency
2018-02-25 11:03:51 +01:00
iio
iio:buffer: make length types match kfifo types
2018-07-03 11:21:30 +02:00
infiniband
RDMA/mlx4: Discard unknown SQP work requests
2018-07-03 11:21:29 +02:00
input
Input: elantech - fix V4 report decoding for module with middle key
2018-07-03 11:21:34 +02:00
iommu
x86/cpufeature: Remove unused and seldomly used cpu_has_xx macros
2018-06-16 09:54:24 +02:00
ipack
…
irqchip
irqchip/gic-v3: Change pr_debug message to pr_devel
2018-05-30 07:48:57 +02:00
isdn
isdn: eicon: fix a missing-check bug
2018-06-13 16:15:28 +02:00
leds
leds: pca955x: Correct I2C Functionality
2018-04-13 19:50:09 +02:00
lguest
…
lightnvm
…
macintosh
…
mailbox
…
mcb
…
md
dm bufio: don't take the lock in dm_bufio_shrink_count
2018-07-11 16:03:51 +02:00
media
media: cx25840: Use subdev host data for PLL override
2018-07-11 16:03:51 +02:00
memory
…
memstick
…
message
scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
2018-05-30 07:48:58 +02:00
mfd
mfd: intel-lpss: Program REMAP register in PIO mode
2018-07-03 11:21:32 +02:00
misc
ibmasm: don't write out of bounds in read handler
2018-07-17 11:31:42 +02:00
mmc
mmc: sdhci-iproc: fix 32bit writes for TRANSFER_MODE register
2018-05-30 07:48:51 +02:00
mtd
mtd: cfi_cmdset_0002: Change erase functions to check chip good only
2018-07-11 16:03:51 +02:00
net
ath10k: fix rfc1042 header retrieval in QCA4019 with eth decap mode
2018-07-11 16:03:47 +02:00
nfc
NFC: nfcmrvl: double free on error path
2018-03-22 09:23:23 +01:00
ntb
ntb_transport: Fix bug with max_mw_size parameter
2018-05-30 07:48:55 +02:00
nubus
…
nvdimm
linvdimm, pmem: Preserve read-only setting for pmem devices
2018-07-03 11:21:31 +02:00
nvme
nvme-pci: initialize queue memory before interrupts
2018-07-11 16:03:47 +02:00
nvmem
…
of
of: unittest: for strings, account for trailing \0 in property length field
2018-07-03 11:21:29 +02:00
oprofile
…
parisc
parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode
2018-05-30 07:49:10 +02:00
parport
parport_pc: Add support for WCH CH382L PCI-E single parallel port card.
2018-04-08 11:52:00 +02:00
pci
PCI: pciehp: Clear Presence Detect and Data Link Layer Status Changed on resume
2018-07-03 11:21:30 +02:00
pcmcia
…
perf
drivers/perf: arm_pmu: handle no platform_device
2018-03-22 09:23:26 +01:00
phy
…
pinctrl
pinctrl: Really force states during suspend/resume
2018-03-24 10:58:48 +01:00
platform
platform/chrome: Use proper protocol transfer function
2018-03-24 10:58:47 +01:00
pnp
…
power
power: supply: pda_power: move from timer to delayed_work
2018-03-24 10:58:45 +01:00
powercap
PowerCap: Fix an error code in powercap_register_zone()
2018-04-13 19:50:05 +02:00
pps
…
ps3
…
ptp
time: Change posix clocks ops interfaces to use timespec64
2018-03-24 10:58:40 +01:00
pwm
pwm: tegra: Increase precision in PWM rate calculation
2018-03-22 09:23:27 +01:00
rapidio
…
ras
…
regulator
regulator: of: Add a missing 'of_node_put()' in an error handling path of 'of_regulator_match()'
2018-05-30 07:49:17 +02:00
remoteproc
…
reset
…
rpmsg
…
rtc
rtc: tx4939: avoid unintended sign extension on a 24 bit shift
2018-05-30 07:49:14 +02:00
s390
scsi: zfcp: fix missing REC trigger trace on enqueue without ERP thread
2018-07-03 11:21:31 +02:00
sbus
…
scsi
scsi: sg: mitigate read/write abuse
2018-07-11 16:03:48 +02:00
sfi
…
sh
…
sn
…
soc
…
spi
spi: Fix scatterlist elements size in spi_map_buf
2018-07-03 11:21:35 +02:00
spmi
…
ssb
…
staging
staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write()
2018-07-11 16:03:51 +02:00
target
tcm_fileio: Prevent information leak for short reads
2018-03-24 10:58:45 +01:00
tc
…
thermal
thermal: imx: Fix race condition in imx_thermal_probe()
2018-04-24 09:32:08 +02:00
thunderbolt
thunderbolt: Resume control channel after hibernation image is created
2018-04-24 09:32:07 +02:00
tty
n_tty: Access echo_* variables carefully.
2018-07-11 16:03:47 +02:00
uio
…
usb
USB: serial: cp210x: add Silicon Labs IDs for Windows Update
2018-07-11 16:03:46 +02:00
uwb
…
vfio
vfio/pci: Virtualize Maximum Read Request Size
2018-04-24 09:32:09 +02:00
vhost
vhost: correctly remove wait queue during poll failure
2018-04-13 19:50:25 +02:00
video
video: uvesafb: Fix integer overflow in allocation
2018-07-03 11:21:34 +02:00
virt
…
virtio
…
vlynq
…
vme
…
w1
1wire: family module autoload fails because of upper/lower case mismatch.
2018-07-03 11:21:27 +02:00
watchdog
watchdog: f71808e_wdt: Fix magic close handling
2018-05-30 07:49:03 +02:00
xen
xen: Remove unnecessary BUG_ON from __unbind_from_irq()
2018-07-03 11:21:34 +02:00
zorro
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:49:11 +02:00
Kconfig
…
Makefile
…