TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.19.166
twx-linux/drivers
T
History
Zhang Xiaohui b35029a1f2 mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start 
[ Upstream commit 5c455c5ab3 ]

mwifiex_cmd_802_11_ad_hoc_start() calls memcpy() without checking
the destination size may trigger a buffer overflower,
which a local user could use to cause denial of service
or the execution of arbitrary code.
Fix it by putting the length check before calling memcpy().

Signed-off-by: Zhang Xiaohui <ruc_zhangxiaohui@163.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20201206084801.26479-1-ruc_zhangxiaohui@163.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-01-09 13:43:48 +01:00
..
accessibility
…
acpi
ACPI: PNP: compare the string length in the matching_id()
2020-12-30 11:26:08 +01:00
amba
…
android
…
ata
…
atm
atm: nicstar: Unmap DMA on send error
2020-11-24 13:27:15 +01:00
auxdisplay
…
base
PM: runtime: Resume the device earlier in __device_release_driver()
2020-11-10 12:36:01 +01:00
bcma
…
block
null_blk: Fix zone size initialization
2021-01-06 14:44:59 +01:00
bluetooth
Bluetooth: hci_h5: close serdev device and free hu in h5_close
2021-01-06 14:45:00 +01:00
bus
bus: fsl-mc: fix error return code in fsl_mc_object_allocate()
2020-12-30 11:26:02 +01:00
cdrom
…
char
random32: make prandom_u32() output unpredictable
2020-11-18 19:18:52 +01:00
clk
clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9
2020-12-30 11:26:16 +01:00
clocksource
clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI
2020-12-30 11:26:00 +01:00
connector
…
cpufreq
cpufreq: scpi: Add missing MODULE_ALIAS
2020-12-30 11:26:01 +01:00
cpuidle
…
crypto
crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
2020-12-30 11:25:55 +01:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
2021-01-09 13:43:47 +01:00
dma-buf
…
edac
EDAC/amd64: Fix PCI component registration
2020-12-30 11:26:10 +01:00
eisa
…
extcon
extcon: max77693: Fix modalias string
2020-12-30 11:26:03 +01:00
firewire
…
firmware
…
fmc
…
fpga
…
fsi
…
gnss
…
gpio
gpio: eic-sprd: break loop when getting NULL device resource
2020-12-30 11:25:45 +01:00
gpu
drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor()
2020-12-30 11:26:13 +01:00
hid
HID: i2c-hid: add Vero K147 to descriptor override
2020-12-30 11:25:48 +01:00
hsi
HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
2020-12-30 11:25:57 +01:00
hv
hv_balloon: disable warning when floor reached
2020-11-18 19:18:41 +01:00
hwmon
…
hwspinlock
…
hwtracing
coresight: tmc-etr: Check if page is valid before dma_map_page()
2020-12-30 11:25:48 +01:00
i2c
i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc()
2020-12-11 13:25:04 +01:00
ide
…
idle
…
iio
iio:magnetometer:mag3110: Fix alignment and data leak issues.
2021-01-09 13:43:48 +01:00
infiniband
RDMA/cxgb4: Validate the number of CQEs
2020-12-30 11:25:56 +01:00
input
Input: cyapa_gen6 - fix out-of-bounds stack access
2020-12-30 11:26:07 +01:00
iommu
iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs
2020-12-11 13:25:03 +01:00
ipack
…
irqchip
irqchip/alpine-msi: Fix freeing of interrupts on allocation error path
2020-12-30 11:26:03 +01:00
isdn
…
leds
leds: bcm6328, bcm6358: use devres LED registering function
2020-11-05 11:08:46 +01:00
lightnvm
…
macintosh
…
mailbox
…
mcb
…
md
dm verity: skip verity work if I/O error when system is shutting down
2021-01-06 14:45:01 +01:00
media
media: gp8psk: initialize stats at power control logic
2021-01-06 14:45:00 +01:00
memory
…
memstick
memstick: r592: Fix error return in r592_probe()
2020-12-30 11:26:00 +01:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2020-11-05 11:08:47 +01:00
mfd
mfd: sprd: Add wakeup capability for PMIC IRQ
2020-11-18 19:18:46 +01:00
misc
misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
2021-01-06 14:45:00 +01:00
mmc
mmc: block: Fixup condition for CMD13 polling for RPMB requests
2020-12-30 11:25:39 +01:00
mtd
Revert "mtd: spinand: Fix OOB read"
2021-01-09 13:43:47 +01:00
mux
…
net
mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start
2021-01-09 13:43:48 +01:00
nfc
nfc: s3fwrn5: Release the nfc firmware
2020-12-30 11:26:04 +01:00
ntb
…
nubus
…
nvdimm
libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels
2020-12-30 11:26:17 +01:00
nvme
nvme: free sq/cq dbbuf pointers when dbbuf set fails
2020-12-02 08:48:09 +01:00
nvmem
…
of
of/address: Fix of_node memory leak in of_dma_is_coherent
2020-11-18 19:18:48 +01:00
opp
…
oprofile
…
parisc
…
parport
…
pci
PCI: Fix pci_slot_release() NULL pointer dereference
2020-12-30 11:26:17 +01:00
pcmcia
…
perf
…
phy
phy: tegra: xusb: Fix dangling pointer on probe failure
2020-12-02 08:48:10 +01:00
pinctrl
pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler
2020-12-30 11:26:16 +01:00
platform
platform/x86: mlx-platform: remove an unused variable
2020-12-30 11:26:17 +01:00
pnp
…
power
power: supply: bq24190_charger: fix reference leak
2020-12-30 11:25:57 +01:00
powercap
powercap: restrict energy meter to root access
2020-11-10 21:11:27 +01:00
pps
…
ps3
powerpc/ps3: use dma_mapping_error()
2020-12-30 11:26:04 +01:00
ptp
…
pwm
pwm: lp3943: Dynamically allocate PWM chip base
2020-12-30 11:26:05 +01:00
rapidio
…
ras
…
regulator
regulator: workaround self-referent regulators
2020-11-24 13:27:25 +01:00
remoteproc
…
reset
…
rpmsg
…
rtc
rtc: sun6i: Fix memleak in sun6i_rtc_clk_init
2021-01-06 14:45:01 +01:00
s390
s390/dasd: fix list corruption of lcu list
2020-12-30 11:26:10 +01:00
sbus
…
scsi
scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free()
2020-12-30 11:26:15 +01:00
sfi
…
sh
…
siox
…
slimbus
slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI
2020-12-30 11:25:57 +01:00
sn
…
soc
soc: qcom: smp2p: Safely acquire spinlock without IRQs
2020-12-30 11:26:14 +01:00
soundwire
…
spi
spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path
2020-12-30 11:26:14 +01:00
spmi
…
ssb
…
staging
spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe
2020-12-30 11:26:14 +01:00
target
scsi: target: iscsi: Fix cmd abort fabric stop race
2020-12-02 08:48:10 +01:00
tc
…
tee
optee: add writeback to valid memory type
2020-12-02 08:48:12 +01:00
thermal
…
thunderbolt
thunderbolt: Add the missed ida_simple_remove() in ring_request_msix()
2020-11-18 19:18:49 +01:00
tty
serial_core: Check for port state when tty is in error state
2020-12-30 11:25:48 +01:00
uio
uio: Fix use-after-free in uio_unregister_device()
2020-11-18 19:18:49 +01:00
usb
USB: serial: keyspan_pda: fix write unthrottling
2020-12-30 11:26:11 +01:00
uwb
…
vfio
vfio/pci: Move dummy_resources_list init in vfio_pci_probe()
2021-01-06 14:44:59 +01:00
vhost
vringh: fix __vringh_iov() when riov and wiov are different
2020-11-05 11:08:53 +01:00
video
video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init()
2020-12-30 11:25:54 +01:00
virt
…
virtio
…
visorbus
…
vlynq
…
vme
…
w1
w1: mxc_w1: Fix timeout resolution problem leading to bus error
2020-11-05 11:08:47 +01:00
watchdog
watchdog: coh901327: add COMMON_CLK dependency
2020-12-30 11:26:05 +01:00
xen
xen/gntdev.c: Mark pages as dirty
2021-01-06 14:44:59 +01:00
zorro
…
Kconfig
…
Makefile
…