shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-08 11:50:43 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
78320d3098edc4c8ef3fcbef52a4602aeeca37ed
linux/drivers
History
Dan Carpenter b925f159f3 airo: Fix read overflows sending packets 
commit 11e7a91994 upstream.

The problem is that we always copy a minimum of ETH_ZLEN (60) bytes from
skb->data even when skb->len is less than ETH_ZLEN so it leads to a read
overflow.

The fix is to pad skb->data to at least ETH_ZLEN bytes.

Cc: <stable@vger.kernel.org>
Reported-by: Hu Jiahui <kirin.say@gmail.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20200527184830.GA1164846@mwanda
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-06-11 09:22:21 +02:00
..
accessibility
…
acpi
Revert "ACPI / video: Add force_native quirk for HP Pavilion dv6"
2020-05-20 08:15:27 +02:00
amba
…
android
ANDROID: binder: synchronize_rcu() when using POLLFREE.
2019-10-07 18:53:19 +02:00
ata
libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set
2020-04-24 07:58:59 +02:00
atm
atm: eni: fix uninitialized variable warning
2020-02-05 13:05:41 +00:00
auxdisplay
…
base
component: Silence bind error on -EPROBE_DEFER
2020-05-27 16:41:46 +02:00
bcma
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
2020-01-29 10:24:31 +01:00
block
virtio-blk: fix hw_queue stopped on arbitrary error
2020-03-20 09:07:43 +01:00
bluetooth
Bluetooth: btusb: fix PM leak in error case of setup
2020-01-12 11:24:16 +01:00
bus
bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
2020-04-24 07:58:46 +02:00
cdrom
cdrom: respect device capabilities during opening action
2020-01-04 13:41:02 +01:00
char
tpm/tpm_tis: Free IRQ if probing fails
2020-05-02 17:23:11 +02:00
clk
clk: tegra: Fix Tegra PMC clock out parents
2020-04-24 07:59:11 +02:00
clocksource
clocksource/drivers/exynos_mct: Fix error path in timer resources initialization
2020-01-29 10:24:17 +01:00
connector
…
cpufreq
cpufreq: powernv: Fix use-after-free
2020-04-24 07:58:59 +02:00
cpuidle
cpuidle: Do not unset the driver if it is there already
2019-12-21 10:42:04 +01:00
crypto
crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static
2020-05-02 17:22:59 +02:00
dax
…
dca
…
devfreq
PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency
2020-02-28 15:42:28 +01:00
dio
…
dma
dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
2020-05-27 16:41:59 +02:00
dma-buf
dma-buf: Fix memory leak in sync_file_merge()
2019-12-21 10:42:32 +01:00
edac
EDAC/ghes: Fix grain calculation
2020-01-04 13:39:51 +01:00
eisa
…
extcon
extcon: sm5502: Reset registers during initialization
2020-01-04 13:39:22 +01:00
firewire
net: add annotations on hh->hh_len lockless accesses
2020-01-12 11:24:19 +01:00
firmware
efi: Add a sanity check to efivar_store_raw()
2020-03-20 09:07:49 +01:00
fmc
…
fpga
…
gpio
gpio: tegra: mask GPIO IRQs during IRQ shutdown
2020-06-03 08:16:34 +02:00
gpu
drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
2020-05-20 08:15:35 +02:00
hid
HID: i2c-hid: add Schneider SCL142ALM to descriptor override
2020-06-11 09:22:20 +02:00
hsi
…
hv
Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels
2018-12-29 13:40:15 +01:00
hwmon
hwmon: (jc42) Fix name to have no illegal characters
2020-05-02 17:23:18 +02:00
hwspinlock
…
hwtracing
intel_th: Fix user-visible error codes
2020-04-02 17:20:25 +02:00
i2c
i2c: dev: Fix the race between the release of i2c_dev and cdev
2020-05-27 16:41:51 +02:00
ide
ide: serverworks: potential overflow in svwks_set_pio_mode()
2020-02-28 15:42:36 +01:00
idle
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
iio
iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()'
2020-05-27 16:42:02 +02:00
infiniband
IB/qib: Call kobject_put() when kobject_init_and_add() fails
2020-06-03 08:16:39 +02:00
input
Input: synaptics-rmi4 - fix error return code in rmi_driver_probe()
2020-06-03 08:16:39 +02:00
iommu
iommu: Fix reference count leak in iommu_group_alloc.
2020-06-03 08:16:42 +02:00
ipack
…
irqchip
irqchip/versatile-fpga: Apply clear-mask earlier
2020-04-24 07:58:53 +02:00
isdn
staging: gigaset: add endpoint-type sanity check
2019-12-21 10:41:50 +01:00
leds
leds: leds-lp5562 allow firmware files up to the maximum length
2019-10-05 12:30:17 +02:00
lguest
…
lightnvm
…
macintosh
macintosh/windfarm_smu_sat: Fix debug output
2019-11-28 18:28:30 +01:00
mailbox
mailbox: handle failed named mailbox channel request
2019-08-04 09:33:41 +02:00
mcb
…
md
dm verity fec: fix hash block number in verity_fec_decode
2020-05-05 19:14:38 +02:00
media
media: ti-vpe: cal: fix disable_irqs to only the intended target
2020-04-24 07:58:52 +02:00
memory
memory: tegra: Fix integer overflow on tick value calculation
2019-05-25 18:26:49 +02:00
memstick
memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
2019-10-29 09:15:25 +01:00
message
scsi: mptfusion: Fix double fetch bug in ioctl
2020-01-23 08:19:39 +01:00
mfd
mfd: dln2: Fix sanity checking for endpoints
2020-04-24 07:59:01 +02:00
misc
mei: release me_cl object reference
2020-05-27 16:42:02 +02:00
mmc
mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2
2020-04-02 17:20:25 +02:00
mtd
mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
2020-05-02 17:23:15 +02:00
net
airo: Fix read overflows sending packets
2020-06-11 09:22:21 +02:00
nfc
NFC: fdp: Fix a signedness bug in fdp_nci_send_patch()
2020-04-02 17:20:30 +02:00
ntb
ntb: intel: fix return value for ndev_vec_mask()
2019-11-28 18:28:52 +01:00
nubus
…
nvdimm
libnvdimm/btt: Remove unnecessary code in btt_freelist_init
2020-05-27 16:42:00 +02:00
nvme
nvme: retain split access workaround for capability reads
2020-01-29 10:24:33 +01:00
nvmem
nvmem: core: return error code instead of NULL from nvmem_device_get
2019-11-25 09:52:16 +01:00
of
of: unittest: kmemleak in of_unittest_platform_populate()
2020-04-24 07:59:10 +02:00
oprofile
…
parisc
parisc: Disable HP HSC-PCI Cards to prevent kernel crash
2019-10-05 12:30:31 +02:00
parport
parport: load lowlevel driver if ports not found
2020-01-04 13:39:55 +01:00
pci
PCI/ASPM: Allow re-enabling Clock PM
2020-05-02 17:23:07 +02:00
pcmcia
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
2018-11-13 11:16:46 -08:00
perf
drivers/perf: arm_pmu: Fix failure path in PM notifier
2019-08-06 18:29:41 +02:00
phy
phy: phy-twl4030-usb: fix denied runtime access
2019-11-25 09:52:50 +01:00
pinctrl
pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler
2020-05-20 08:15:35 +02:00
platform
platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
2020-05-27 16:42:00 +02:00
pnp
…
power
power: supply: bq27xxx_battery: Silence deferred-probe error
2020-04-24 07:59:11 +02:00
powercap
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
pps
drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
2019-08-04 09:33:45 +02:00
ps3
…
ptp
ptp: free ptp device pin descriptors properly
2020-05-20 08:15:33 +02:00
pwm
pwm: bcm2835: Dynamically allocate base
2020-05-02 17:23:07 +02:00
rapidio
rapidio: fix an error in get_user_pages_fast() error handling
2020-05-27 16:42:02 +02:00
ras
…
regulator
regulator: rk808: Lower log level on optional GPIOs being not available
2020-02-28 15:42:23 +01:00
remoteproc
remoteproc: Fix wrong rvring index computation
2020-05-02 17:23:14 +02:00
reset
reset: Fix potential use-after-free in __of_reset_control_get()
2019-11-25 09:53:42 +01:00
rpmsg
rpmsg: smd: fix memory leak on channel create
2018-11-13 11:17:03 -08:00
rtc
rtc: pm8xxx: Fix issue in RTC write path
2020-04-24 07:59:09 +02:00
s390
scsi: zfcp: fix request object use-after-free in send path causing wrong traces
2020-06-03 08:16:48 +02:00
sbus
drivers/sbus/char: add of_node_put()
2018-12-21 14:11:36 +01:00
scsi
scsi: ufs: Release clock if DMA map fails
2020-06-11 09:22:21 +02:00
sfi
…
sh
…
sn
…
soc
soc: qcom: smem: Use le32_to_cpu for comparison
2020-04-24 07:59:10 +02:00
spi
spi: dw: use "smp_mb()" to avoid sending spi data error
2020-06-11 09:22:18 +02:00
spmi
…
ssb
ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
2019-05-31 06:48:12 -07:00
staging
iio: sca3000: Remove an erroneous 'get_device()'
2020-05-27 16:42:02 +02:00
target
scsi: target: fix PR IN / READ FULL STATUS for FC
2020-05-02 17:23:17 +02:00
tc
TC: Set DMA masks for devices
2018-11-13 11:17:02 -08:00
thermal
thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
2020-01-29 10:24:24 +01:00
thunderbolt
thunderbolt: Use 32-bit writes when writing ring producer/consumer
2019-11-06 12:18:14 +01:00
tty
sc16is7xx: move label 'err_spi' to correct section
2020-06-03 08:16:47 +02:00
uio
uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol()
2020-02-28 15:42:20 +01:00
usb
usb: gadget: f_uac2: fix error handling in afunc_bind (again)
2020-06-11 09:22:18 +02:00
uwb
…
vfio
vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
2020-05-05 19:14:39 +02:00
vhost
vhost: vsock: kick send_pkt worker once device is started
2020-05-10 10:28:00 +02:00
video
fbdev: potential information leak in do_fb_ioctl()
2020-04-24 07:59:14 +02:00
virt
drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
2019-05-16 19:43:47 +02:00
virtio
virtio-balloon: fix managed page counts when migrating pages between zones
2019-12-21 10:41:57 +01:00
vlynq
…
vme
vme: bridges: reduce stack usage
2020-02-28 15:42:33 +01:00
w1
w1: fix the resume command API
2019-05-31 06:48:15 -07:00
watchdog
watchdog: Fix the race between the release of watchdog_core_data and cdev
2020-05-27 16:41:53 +02:00
xen
xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
2020-05-02 17:23:17 +02:00
zorro
…
Kconfig
…
Makefile
…