Nicolai Stange 2b91a52e15 driver core: platform: Don't read past the end of "driver_override" buffer ...

commit bf563b01c2 upstream.

When printing the driver_override parameter when it is 4095 and 4094 bytes
long, the printing code would access invalid memory because we need count+1
bytes for printing.

Reject driver_override values of these lengths in driver_override_store().

This is in close analogy to commit 4efe874aac ("PCI: Don't read past the
end of sysfs "driver_override" buffer") from Sasha Levin.

Fixes: 3d713e0e38 ("driver core: platform: add device binding path 'driver_override'")
Signed-off-by: Nicolai Stange <nstange@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-10-12 11:27:32 +02:00

..

power

PM / Domains: defer dev_pm_domain_set() until genpd->attach_dev succeeds if present

2017-08-06 19:19:42 -07:00

regmap

regmap: spmi: Fix regmap_spmi_ext_read in multi-byte case

2016-05-18 17:06:48 -07:00

attribute_container.c

attribute_container: fix missing blank lines after declarations

2015-03-25 14:35:09 +01:00

base.h

driver core: correct device's shutdown order

2015-08-05 17:07:19 -07:00

bus.c

driver core: bus: Fix a potential double free

2017-09-13 14:09:44 -07:00

cacheinfo.c

cpu/cacheinfo: Fix teardown path

2015-09-17 06:06:54 -07:00

class.c

class_find_device: fix reference to argument "match"

2015-09-29 15:23:14 +02:00

component.c

component: fix bug with legacy API

2014-07-04 18:05:05 +01:00

container.c

ACPI / hotplug / driver core: Handle containers in a special way

2013-12-29 15:25:48 +01:00

core.c

Add "shutdown" to "struct class".

2017-07-21 07:44:58 +02:00

cpu.c

cpu: Remove bogus __ref annotation of cpu_subsys_online()

2015-08-05 15:18:26 -07:00

dd.c

drivers/pinctrl: Add the concept of an "init" state

2015-10-27 11:24:23 +01:00

devcoredump.c

devcoredump: provide a one-way disable function

2014-11-26 19:40:12 -08:00

devres.c

devm: make allocations numa aware by default

2015-10-09 17:00:33 -04:00

devtmpfs.c

VFS: assorted weird filesystems: d_inode() annotations

2015-04-15 15:06:58 -04:00

dma-coherent.c

drivers: dma-coherent: add initialization from device tree

2014-10-14 02:18:12 +02:00

dma-contiguous.c

Merge tag 'driver-core-4.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2015-11-04 21:50:37 -08:00

dma-mapping.c

drivers: base: dma-mapping: page align the size when unmap_kernel_range

2016-10-22 12:26:55 +02:00

driver.c

driver core: add missing blank line after declaration

2015-03-25 14:36:30 +01:00

firmware_class.c

firmware: fix usermode helper fallback loading

2017-01-09 08:07:49 +01:00

firmware.c

firmware: change firmware_kset to firmware_kobj

2008-01-24 20:40:23 -08:00

hypervisor.c

drivers/base: Add export.h for EXPORT_SYMBOL/THIS_MODULE as required.

2011-10-31 19:31:38 -04:00

init.c

drivers: of/base: move of_init to driver_init

2015-05-26 19:55:56 -07:00

isa.c

dma-mapping: replace all DMA_24BIT_MASK macro with DMA_BIT_MASK(24)

2009-04-07 08:31:12 -07:00

Kconfig

cma: make default CMA area size zero for x86

2014-12-10 17:41:06 -08:00

Makefile

drivers/base: Add MSI domain support for non-PCI devices

2015-07-30 00:14:38 +02:00

map.c

drivers: base: map: Use kmalloc_array instead of kmalloc

2015-03-25 14:35:08 +01:00

memory.c

base/memory, hotplug: fix a kernel oops in show_valid_zones()

2017-02-09 08:02:47 +01:00

module.c

base: make module_create_drivers_dir race-free

2016-07-27 09:47:32 -07:00

node.c

Revert "mm: Check if section present during memory block (un)registering"

2015-10-13 10:57:25 -07:00

pinctrl.c

drivers/pinctrl: Add the concept of an "init" state

2015-10-27 11:24:23 +01:00

platform-msi.c

irqdomain/msi: Use fwnode instead of of_node

2015-10-13 19:01:25 +02:00

platform.c

driver core: platform: Don't read past the end of "driver_override" buffer

2017-10-12 11:27:32 +02:00

property.c

device property: ACPI: Remove unused DMA APIs

2015-11-07 01:29:22 +01:00

soc.c

base: soc: siplify ida usage

2015-10-04 19:42:22 +01:00

syscore.c

genirq: Simplify wakeup mechanism

2014-09-01 13:48:59 +02:00

topology.c

sched/topology: Rename topology_thread_cpumask() to topology_sibling_cpumask()

2015-05-27 15:22:15 +02:00

transport_class.c

drivers/base: transport_class explicitly requires EXPORT_SYMBOL

2011-10-31 19:31:15 -04:00