TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v5.10.145
twx-linux/drivers
T
History
Hyunwoo Kim 06e194e113 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write 
[ Upstream commit a09d2d00af ]

In pxa3xx_gcu_write, a count parameter of type size_t is passed to words of
type int.  Then, copy_from_user() may cause a heap overflow because it is used
as the third argument of copy_from_user().

Signed-off-by: Hyunwoo Kim <imv4bel@gmail.com>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-09-23 14:17:00 +02:00
..
accessibility
tty: the rest, stop using tty_schedule_flip()
2022-07-29 17:19:28 +02:00
acpi
ACPI: processor: Remove freq Qos request for all CPUs
2022-08-31 17:15:23 +02:00
amba
…
android
binder: fix UAF of ref->proc caused by race condition
2022-09-08 11:11:38 +02:00
ata
ata: libata-eh: Add missing command name
2022-08-25 11:37:50 +02:00
atm
atm: idt77252: fix use-after-free bugs caused by tst_timer
2022-08-25 11:38:02 +02:00
auxdisplay
…
base
driver core: Don't probe devices after bus_type.match() probe deferral
2022-09-08 11:11:40 +02:00
bcma
…
block
xen-blkfront: Cache feature_persistent value before advertisement
2022-09-15 11:32:02 +02:00
bluetooth
Bluetooth: hci_intel: Add check for platform_driver_register
2022-08-21 15:15:49 +02:00
bus
bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()
2022-08-21 15:15:35 +02:00
cdrom
…
char
…
clk
clk: bcm: rpi: Add missing newline
2022-09-08 11:11:38 +02:00
clocksource
…
connector
…
counter
…
cpufreq
…
cpuidle
…
crypto
crypto: hisilicon/sec - fix auth key size error
2022-08-21 15:15:50 +02:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: bestcomm: fix system boot lockups
2022-09-23 14:16:56 +02:00
dma-buf
udmabuf: Set the DMA mask for the udmabuf device (v2)
2022-09-05 10:28:55 +02:00
edac
EDAC/ghes: Set the DIMM label unconditionally
2022-08-03 12:00:50 +02:00
eisa
…
extcon
…
firewire
…
firmware
efi: capsule-loader: Fix use-after-free in efi_capsule_write
2022-09-15 11:32:02 +02:00
fpga
fpga: altera-pr-ip: fix unsigned comparison with less than zero
2022-08-21 15:15:53 +02:00
fsi
…
gnss
…
gpio
gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
2022-09-23 14:16:57 +02:00
gpu
drm/meson: Fix OSD1 RGB to YCbCr coefficient
2022-09-23 14:16:58 +02:00
greybus
…
hid
hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
2022-09-20 12:38:31 +02:00
hsi
…
hv
…
hwmon
hwmon: (mr75203) enable polling for all VM channels
2022-09-15 11:32:06 +02:00
hwspinlock
…
hwtracing
intel_th: pci: Add Raptor Lake-S CPU support
2022-08-21 15:16:17 +02:00
i2c
i2c: imx: Make sure to unregister adapter on remove()
2022-08-25 11:38:08 +02:00
i3c
…
ide
…
idle
intel_idle: Disable IBRS during long idle
2022-07-25 11:26:43 +02:00
iio
iio: adc: mcp3911: use correct formula for AD conversion
2022-09-08 11:11:37 +02:00
infiniband
RDMA/mlx5: Set local port to one when accessing counters
2022-09-15 11:32:06 +02:00
input
Input: goodix - add compatible string for GT1158
2022-09-20 12:38:33 +02:00
interconnect
interconnect: imx: fix max_node_id
2022-08-21 15:16:00 +02:00
iommu
iommu/vt-d: Correctly calculate sagaw value of IOMMU
2022-09-20 12:38:31 +02:00
ipack
…
irqchip
irqchip/tegra: Fix overflow implicit truncation warnings
2022-08-25 11:38:12 +02:00
isdn
…
leds
…
lightnvm
…
macintosh
macintosh/adb: fix oob read in do_adb_query() function
2022-08-11 13:06:47 +02:00
mailbox
…
mcb
…
md
md: call __md_stop_writes in md_stop
2022-08-31 17:15:23 +02:00
media
media: mceusb: Use new usb_control_msg_*() routines
2022-09-08 11:11:39 +02:00
memory
…
memstick
memstick/ms_block: Fix a memory leak
2022-08-21 15:15:58 +02:00
message
…
mfd
mfd: max77620: Fix refcount leak in max77620_initialise_fps
2022-08-21 15:16:09 +02:00
misc
misc: fastrpc: fix memory corruption on open
2022-09-08 11:11:37 +02:00
mmc
mmc: core: Fix UHS-I SD 1.8V workaround branch
2022-09-08 11:11:41 +02:00
most
…
mtd
mtd: rawnand: arasan: Prevent an unsupported configuration
2022-08-21 15:16:26 +02:00
mux
…
net
net: usb: qmi_wwan: add Quectel RM520N
2022-09-23 14:17:00 +02:00
nfc
nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout
2022-08-31 17:15:16 +02:00
ntb
NTB: ntb_tool: uninitialized heap data in tool_fn_write()
2022-08-25 11:38:01 +02:00
nubus
…
nvdimm
…
nvme
nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
2022-09-20 12:38:32 +02:00
nvmem
…
of
of: fdt: fix off-by-one error in unflatten_dt_nodes()
2022-09-23 14:16:57 +02:00
opp
opp: Fix error check in dev_pm_opp_attach_genpd()
2022-08-21 15:16:04 +02:00
oprofile
…
parisc
parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
2022-09-23 14:16:58 +02:00
parport
…
pci
Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
2022-09-05 10:28:55 +02:00
pcmcia
…
perf
perf/arm_pmu_platform: fix tests for platform_get_irq() failure
2022-09-20 12:38:32 +02:00
phy
…
pinctrl
pinctrl: sunxi: Fix name for A100 R_PIO
2022-09-23 14:16:57 +02:00
platform
platform/x86/intel: hid: add quirk to support Surface Go 3
2022-09-23 14:16:56 +02:00
pnp
…
power
power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
2022-07-29 17:19:10 +02:00
powercap
…
pps
…
ps3
…
ptp
…
pwm
pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource()
2022-08-21 15:15:37 +02:00
rapidio
…
ras
…
regulator
regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
2022-09-23 14:16:59 +02:00
remoteproc
remoteproc: sysmon: Wait for SSCTL service to come up
2022-08-21 15:16:08 +02:00
reset
…
rpmsg
rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
2022-08-21 15:16:08 +02:00
rtc
…
s390
scsi: zfcp: Fix missing auto port scan and thus missing target ports
2022-08-21 15:16:13 +02:00
sbus
…
scsi
scsi: lpfc: Add missing destroy_workqueue() in error path
2022-09-15 11:32:04 +02:00
sfi
…
sh
…
siox
…
slimbus
…
soc
soc: fsl: select FSL_GUTS driver for DPIO
2022-09-20 12:38:33 +02:00
soundwire
soundwire: bus_type: fix remove and shutdown support
2022-08-21 15:15:56 +02:00
spi
spi: meson-spicc: add local pow2 clock ops to preserve rate between messages
2022-08-25 11:38:06 +02:00
spmi
…
ssb
…
staging
staging: rtl8712: fix use after free bugs
2022-09-08 11:11:37 +02:00
target
…
tc
…
tee
tee: fix compiler warning in tee_shm_register()
2022-09-15 11:32:04 +02:00
thermal
thermal: sysfs: Fix cooling_device_stats_setup() error code path
2022-08-21 15:15:22 +02:00
thunderbolt
thunderbolt: Use the actual buffer in tb_async_error()
2022-09-08 11:11:39 +02:00
tty
Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
2022-09-23 14:16:59 +02:00
uio
…
usb
usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
2022-09-23 14:16:56 +02:00
vdpa
…
vfio
vfio: Clear the caps->buf to NULL after free
2022-08-25 11:38:18 +02:00
vhost
…
video
video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
2022-09-23 14:17:00 +02:00
virt
vboxguest: Do not use devm for irq
2022-08-25 11:38:14 +02:00
virtio
…
visorbus
…
vlynq
…
vme
…
w1
…
watchdog
watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe()
2022-08-21 15:16:10 +02:00
xen
xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
2022-09-08 11:11:38 +02:00
zorro
…
Kconfig
…
Makefile
…