Anton Vasilyev 0a93d88d66 tty: rocket: Fix possible buffer overwrite on register_PCI ...

[ Upstream commit 0419056ec8 ]

If number of isa and pci boards exceed NUM_BOARDS on the path
rp_init()->init_PCI()->register_PCI() then buffer overwrite occurs
in register_PCI() on assign rcktpt_io_addr[i].

The patch adds check on upper bound for index of registered
board in register_PCI.

Found by Linux Driver Verification project (linuxtesting.org).

Signed-off-by: Anton Vasilyev <vasilyev@ispras.ru>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-09-19 22:48:57 +02:00

..

hvc

hvc_opal: don't set tb_ticks_per_usec in udbg_init_opal_common()

2018-08-06 16:24:31 +02:00

ipwireless

…

serial

serial: 8250_dw: always set baud rate in dw8250_set_termios

2018-08-22 07:48:37 +02:00

vt

…

amiserial.c

…

bfin_jtag_comm.c

…

cyclades.c

…

ehv_bytechan.c

…

goldfish.c

…

isicom.c

…

Kconfig

…

Makefile

…

metag_da.c

…

mips_ejtag_fdc.c

…

moxa.c

…

moxa.h

…

mxser.c

…

mxser.h

…

n_gsm.c

tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set

2018-05-02 07:53:40 -07:00

n_hdlc.c

…

n_r3964.c

…

n_tracerouter.c

…

n_tracesink.c

…

n_tracesink.h

…

n_tty.c

n_tty: Access echo_* variables carefully.

2018-07-11 16:03:47 +02:00

nozomi.c

…

pty.c

tty: Fix data race in tty_insert_flip_string_fixed_flag

2018-08-06 16:24:36 +02:00

rocket_int.h

…

rocket.c

tty: rocket: Fix possible buffer overwrite on register_PCI

2018-09-19 22:48:57 +02:00

rocket.h

…

synclink_gt.c

…

synclink.c

…

synclinkmp.c

…

sysrq.c

…

tty_audit.c

…

tty_buffer.c

…

tty_io.c

tty: Don't call panic() at tty_ldisc_init()

2018-05-02 07:53:40 -07:00

tty_ioctl.c

…

tty_ldisc.c

tty: Use __GFP_NOFAIL for tty_ldisc_get()

2018-05-02 07:53:41 -07:00

tty_ldsem.c

…

tty_mutex.c

…

tty_port.c

…