Xie Yongji 03202ed9b8 virtio_console: Assure used length from device is limited ...

[ Upstream commit d00d8da586 ]

The buf->len might come from an untrusted device. This
ensures the value would not exceed the size of the buffer
to avoid data corruption or loss.

Signed-off-by: Xie Yongji <xieyongji@bytedance.com>
Acked-by: Jason Wang <jasowang@redhat.com>
Link: https://lore.kernel.org/r/20210525125622.1203-1-xieyongji@bytedance.com
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-05-16 11:27:25 +09:00

..

agp

parisc: parisc-agp requires SBA IOMMU driver

2023-05-16 10:51:36 +09:00

hw_random

hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled

2023-05-15 16:18:31 +09:00

ipmi

ipmi/watchdog: Stop watchdog timer when the current action is 'none'

2023-05-16 11:26:07 +09:00

mwave

char/mwave: fix potential Spectre v1 vulnerability

2023-05-15 11:10:05 +09:00

pcmcia

char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()

2023-05-16 11:24:38 +09:00

tpm

tpm: ibmvtpm: Wait for buffer to be set before proceeding

2023-05-16 09:15:52 +09:00

xilinx_hwicap

char:xilinx_hwicap:buffer_icap - change 1/0 to true/false for bool type variable in function buffer_icap_set_configuration().

2015-06-12 16:58:33 -07:00

xillybus

char: xillybus: Fix spelling mistake and comment

2016-08-31 14:47:54 +02:00

aml-gpiomem.c

ODROID-COMMON:Add /dev/gpiomem device for rootless user GPIO access

2019-12-11 18:23:19 +09:00

apm-emulation.c

apm-emulation: add hibernation APM events to support suspend2disk

2014-01-07 13:50:28 +01:00

applicom.c

applicom: Fix potential Spectre v1 vulnerabilities

2023-05-15 11:50:07 +09:00

applicom.h

…

bfin-otp.c

miscdevice: Use module_misc_device() macro

2016-08-31 14:12:35 +02:00

bsr.c

bsr: avoid format string leaking into device name

2014-07-09 16:59:15 -07:00

ds1302.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

ds1620.c

ds1620: single_open() leak

2013-05-05 00:11:29 -04:00

dsp56k.c

dsp56k: prevent a harmless underflow

2016-07-14 16:21:53 +09:00

dtlk.c

new helper: file_inode(file)

2013-02-22 23:31:31 -05:00

efirtc.c

drivers/char: make efirtc.c driver explicitly non-modular

2015-09-20 19:32:35 -07:00

generic_nvram.c

don't open-code generic_file_llseek_size()

2015-12-09 13:00:45 -05:00

hangcheck-timer.c

hangcheck-timer: cleanup casting in hangcheck_init()

2014-11-07 11:24:01 -08:00

hpet.c

char: hpet: add checks after calling ioremap

2023-05-16 11:10:36 +09:00

Kconfig

tty: mark Siemens R3964 line discipline as BROKEN

2023-05-15 12:22:28 +09:00

lp.c

char: lp: fix possible integer overflow in lp_setup()

2017-05-25 15:44:30 +02:00

Makefile

ODROID-COMMON:Add /dev/gpiomem device for rootless user GPIO access

2019-12-11 18:23:19 +09:00

mbcs.c

don't open-code generic_file_llseek_size()

2015-12-09 13:00:45 -05:00

mbcs.h

Fix common misspellings

2011-03-31 11:26:23 -03:00

mem.c

/dev/mem: Bail out upon SIGKILL.

2023-05-15 14:34:59 +09:00

misc.c

char: make misc_deregister a void function

2015-08-05 10:35:49 -07:00

mmtimer.c

drivers/char/mmtimer.c: Remove useless kfree

2012-09-26 13:20:40 -07:00

mspec.c

tree wide: use kvfree() than conditional kfree()/vfree()

2016-01-22 17:02:18 -08:00

nsc_gpio.c

new helper: file_inode(file)

2013-02-22 23:31:31 -05:00

nvram.c

char/nvram: set array of const as const

2016-02-08 14:57:30 -08:00

nwbutton.c

char: nwbutton: avoid unused variable warning

2016-02-09 17:39:56 -08:00

nwbutton.h

…

nwflash.c

new helpers: no_seek_end_llseek{,_size}()

2015-12-23 10:41:31 -05:00

pc8736x_gpio.c

pc8736x_gpio: use platform_device_unregister in pc8736x_gpio_cleanup()

2012-10-24 15:52:29 -07:00

powernv-op-panel.c

powerpc/powernv: Add driver for operator panel on FSP machines

2016-06-29 17:33:46 +10:00

ppdev.c

ppdev: fix PPGETTIME/PPSETTIME ioctls

2023-05-15 16:16:41 +09:00

ps3flash.c

wrappers for ->i_mutex access

2016-01-22 18:04:28 -05:00

random.c

random: fix the RNDRESEEDCRNG ioctl

2023-05-16 10:36:45 +09:00

raw.c

drivers: char: raw: Removed unnecessary braces

2016-02-08 14:57:30 -08:00

rtc.c

various char drivers: remove deprecated IRQF_DISABLED

2013-10-16 12:36:10 -07:00

scx200_gpio.c

llseek: automatically add .llseek fop

2010-10-15 15:53:27 +02:00

snsc_event.c

various char drivers: remove deprecated IRQF_DISABLED

2013-10-16 12:36:10 -07:00

snsc.c

snsc: check return value of class_create

2016-08-31 14:47:54 +02:00

snsc.h

headers: kobject.h redux

2011-01-10 08:51:44 -08:00

sonypi.c

fs: Replace current_fs_time() with current_time()

2016-09-27 21:06:22 -04:00

tb0219.c

mips: separate extable.h, switch module.h to it

2016-10-05 18:36:18 -04:00

tile-srom.c

tile-srom: avoid krealloc(... __GFP_ZERO) pattern

2016-08-30 14:45:50 +02:00

tlclk.c

drivers: char: tlclk.c: Avoid data race between init and interrupt handler

2023-05-16 09:16:12 +09:00

toshiba.c

toshiba laptop: replace ioremap_cache with ioremap

2015-08-05 17:26:00 -07:00

ttyprintk.c

ttyprintk: Add TTY hangup callback.

2023-05-16 11:02:26 +09:00

uv_mmtimer.c

BKL: remove extraneous #include <smp_lock.h>

2010-11-17 08:59:32 -08:00

virtio_console.c

virtio_console: Assure used length from device is limited

2023-05-16 11:27:25 +09:00