Cristian Marussi 6813d8ba7d firmware: arm_scmi: Harden shared memory access in fetch_notification ...

[ Upstream commit 9bae076cd4 ]

A misbheaving SCMI platform firmware could reply with out-of-spec
notifications, shorter than the mimimum size comprising a header.

Fixes: d5141f37c4 ("firmware: arm_scmi: Add notifications support in transport layer")
Signed-off-by: Cristian Marussi <cristian.marussi@arm.com>
Link: https://lore.kernel.org/r/20221222183823.518856-4-cristian.marussi@arm.com
Signed-off-by: Sudeep Holla <sudeep.holla@arm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-02-01 08:23:10 +01:00

..

arm_scmi

firmware: arm_scmi: Harden shared memory access in fetch_notification

2023-02-01 08:23:10 +01:00

broadcom

firmware: tee_bnxt: Release TEE shm, session, and context during kexec

2021-08-15 14:00:25 +02:00

efi

efi: fix userspace infinite retry read efivars after EFI runtime services page fault

2023-01-24 07:19:56 +01:00

google

gsmi: fix null-deref in gsmi_get_variable

2023-01-24 07:20:00 +01:00

imx

firmware: imx: select SOC_BUS to fix firmware build

2021-02-03 23:28:46 +01:00

meson

firmware: meson_sm: Add secure power domain support

2020-02-14 11:37:34 -08:00

psci

firmware/psci: fix application of sizeof to pointer

2021-11-18 14:03:38 +01:00

smccc

firmware: smccc: Fix check for ARCH_SOC_ID not implemented

2021-12-01 09:19:04 +01:00

tegra

firmware: tegra: Fix error check return value of debugfs_create_file()

2022-08-21 15:15:31 +02:00

xilinx

firmware: xilinx: Fix dereferencing freed memory

2021-05-14 09:50:05 +02:00

arm_scpi.c

firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

2022-08-21 15:16:17 +02:00

arm_sdei.c

firmware: arm_sdei: Remove _sdei_event_unregister()

2020-09-28 21:52:23 +01:00

dmi_scan.c

Replace HTTP links with HTTPS ones: DMI/SMBIOS SUPPORT

2020-07-16 11:46:24 +02:00

dmi-id.c

firmware/dmi: Report DMI Bios & EC firmware release

2020-06-06 11:35:50 +02:00

dmi-sysfs.c

firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle

2022-06-14 18:32:34 +02:00

edd.c

edd: Use scnprintf() for avoiding potential buffer overflow

2020-04-02 20:42:29 +02:00

iscsi_ibft_find.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 287

2019-06-05 17:36:37 +02:00

iscsi_ibft.c

ibft: Replace zero-length array with flexible-array

2020-06-15 23:08:31 -05:00

Kconfig

firmware: arm_scmi: Add SMCCC discovery dependency in Kconfig

2021-07-25 14:36:14 +02:00

Makefile

firmware: arm_scmi: Enable building as a single module

2020-09-14 07:31:03 +01:00

memmap.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 287

2019-06-05 17:36:37 +02:00

pcdp.c

efi/ia64: Move HCDP and MPS table handling into IA64 arch code

2020-02-23 21:59:42 +01:00

pcdp.h

firmware: pcdp: Replace zero-length array with flexible-array

2020-06-15 23:08:32 -05:00

qcom_scm-legacy.c

firmware: qcom_scm-legacy: Replace zero-length array with flexible-array

2020-05-12 15:16:33 -07:00

qcom_scm-smc.c

firmware: qcom_scm: Reduce locking section for __get_convention()

2021-05-14 09:50:14 +02:00

qcom_scm.c

firmware: qcom: scm: Remove reassignment to desc following initializer

2022-04-08 14:40:06 +02:00

qcom_scm.h

firmware: qcom_scm: Reduce locking section for __get_convention()

2021-05-14 09:50:14 +02:00

qemu_fw_cfg.c

firmware: qemu_fw_cfg: fix kobject leak in probe error path

2022-01-20 09:17:51 +01:00

raspberrypi.c

firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()

2023-01-14 10:15:57 +01:00

scpi_pm_domain.c

firmware: arm_scpi: Fix string overflow in SCPI genpd driver

2021-12-22 09:30:50 +01:00

stratix10-rsu.c

firmware: stratix10-rsu: fix warnings

2020-07-02 14:48:48 +02:00

stratix10-svc.c

firmware: stratix10-svc: fix a missing check on list iterator

2022-06-14 18:32:32 +02:00

ti_sci.c

Merge tag 'armsoc-drivers' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc

2020-10-24 10:39:22 -07:00

ti_sci.h

firmware: ti_sci: Replace HTTP links with HTTPS ones

2020-07-24 14:44:52 -07:00

trusted_foundations.c

firmware: tf: Different way of L2 cache enabling after LP2 suspend

2020-05-06 18:27:26 +02:00

turris-mox-rwtm.c

firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string

2021-07-25 14:36:17 +02:00