shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-04-02 03:03:00 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
bc342bc0295422962fbbdd5aa1dd17b3bb7345bf
linux/drivers
History
Benjamin Tissoires 2be683020b Input: elan_i2c_smbus - fix corrupted stack 
commit 40f7090bb1 upstream.

New ICs (like the one on the Lenovo T480s) answer to
ETP_SMBUS_IAP_VERSION_CMD 4 bytes instead of 3. This corrupts the stack
as i2c_smbus_read_block_data() uses the values returned by the i2c
device to know how many data it need to return.

i2c_smbus_read_block_data() can read up to 32 bytes (I2C_SMBUS_BLOCK_MAX)
and there is no safeguard on how many bytes are provided in the return
value. Ensure we always have enough space for any future firmware.
Also 0-initialize the values to prevent any access to uninitialized memory.

Cc: <stable@vger.kernel.org> # v4.4.x, v4.9.x, v4.14.x, v4.15.x, v4.16.x
Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Acked-by: KT Liao <kt.liao@emc.com.tw>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-06-05 11:41:56 +02:00
..
accessibility
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
acpi
ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c
2018-05-30 07:52:31 +02:00
amba
ARM: amba: Don't read past the end of sysfs "driver_override" buffer
2018-05-01 12:58:21 -07:00
android
ANDROID: binder: prevent transactions into own process.
2018-05-01 12:58:20 -07:00
ata
libata: Fix compile warning with ATA_DEBUG enabled
2018-05-30 07:51:54 +02:00
atm
atm: zatm: Fix potential Spectre v1
2018-05-16 10:10:29 +02:00
auxdisplay
auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
2018-02-07 11:12:20 -08:00
base
regmap: Correct comparison in regmap_cached
2018-05-30 07:52:41 +02:00
bcma
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
block
block: null_blk: fix 'Invalid parameters' when loading module
2018-05-30 07:52:36 +02:00
bluetooth
Bluetooth: btusb: Add device ID for RTL8822BE
2018-05-25 16:17:42 +02:00
bus
sunxi-rsb: Include OF based modalias in device uevent
2018-01-10 09:31:19 +01:00
cdrom
cdrom: do not call check_disk_change() inside cdrom_open()
2018-05-30 07:52:34 +02:00
char
hwrng: stm32 - add reset during probe
2018-05-30 07:52:36 +02:00
clk
clk: samsung: exynos3250: Fix PLL rates
2018-05-25 16:17:55 +02:00
clocksource
clocksource/drivers/mips-gic-timer: Use correct shift count to extract data
2018-05-30 07:52:06 +02:00
connector
…
cpufreq
cpufreq: Reorder cpufreq_online() error code path
2018-05-30 07:52:38 +02:00
cpuidle
cpuidle: fix broadcast control when broadcast can not be entered
2017-12-25 14:26:30 +01:00
crypto
crypto: inside-secure - fix the invalidation step during cra_exit
2018-05-25 16:17:46 +02:00
dax
dev/dax: fix uninitialized variable build warning
2017-12-20 10:10:34 +01:00
dca
…
devfreq
PM / devfreq: Fix potential NULL pointer dereference in governor_store
2018-04-12 12:32:13 +02:00
dio
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
dma
dmaengine: qcom: bam_dma: get num-channels and num-ees from dt
2018-05-30 07:52:37 +02:00
dma-buf
dma-buf/fence: Fix lock inversion within dma-fence-array
2018-03-19 08:42:47 +01:00
edac
x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type
2018-04-19 08:56:20 +02:00
eisa
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
extcon
extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO
2018-04-24 09:36:29 +02:00
firewire
firewire-ohci: work around oversized DMA reads on JMicron controllers
2018-04-26 11:02:03 +02:00
firmware
efi/arm*: Only register page tables when they exist
2018-05-30 07:52:34 +02:00
fmc
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
fpga
fpga-manager: altera-ps-spi: preserve nCONFIG state
2018-05-01 12:58:24 -07:00
fsi
drivers/fsi/scom: Remove reset before every putscom
2017-08-28 17:15:16 +02:00
gpio
gpio: fix error path in lineevent_create
2018-05-16 10:10:26 +02:00
gpu
drm/vmwgfx: Set dmabuf_size when vmw_dmabuf_init is successful
2018-05-30 07:52:42 +02:00
hid
HID: roccat: prevent an out of bounds read in kovaplus_profile_activated()
2018-04-26 11:02:10 +02:00
hsi
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
hv
Drivers: hv: vmbus: do not mark HV_PCIE as perf_device
2018-04-19 08:56:16 +02:00
hwmon
hwmon: (pmbus/adm1275) Accept negative page register values
2018-05-30 07:52:34 +02:00
hwspinlock
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
hwtracing
coresight: Use %px to print pcsr instead of %p
2018-05-30 07:52:32 +02:00
i2c
i2c: mv64xxx: Apply errata delay only in standard mode
2018-05-30 07:52:31 +02:00
ide
cdrom: do not call check_disk_change() inside cdrom_open()
2018-05-30 07:52:34 +02:00
idle
Revert "x86/mm: Stop calling leave_mm() in idle code"
2017-11-04 15:01:50 +01:00
iio
iio: imu: st_lsm6dsx: fix endianness in st_lsm6dsx_read_oneshot()
2018-03-28 18:24:49 +02:00
infiniband
IB/core: Honor port_num while resolving GID for IB link layer
2018-05-30 07:52:32 +02:00
input
Input: elan_i2c_smbus - fix corrupted stack
2018-06-05 11:41:56 +02:00
iommu
iommu/mediatek: Fix protect memory setting
2018-05-30 07:52:30 +02:00
ipack
…
irqchip
irqchip/qcom: Fix check for spurious interrupts
2018-05-09 09:51:56 +02:00
isdn
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
leds
leds: pm8058: Silence pointer to integer size warning
2018-03-19 08:42:50 +01:00
lightnvm
lightnvm: pblk: protect line bitmap while submitting meta io
2017-12-20 10:10:38 +01:00
macintosh
drivers: macintosh: rack-meter: really fix bogus memsets
2018-05-30 07:52:27 +02:00
mailbox
mailbox: mailbox-test: don't rely on rx_buffer content to signal data ready
2017-12-14 09:53:12 +01:00
mcb
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
md
bcache: quit dc->writeback_thread when BCACHE_DEV_DETACHING is set
2018-05-30 07:52:30 +02:00
media
media: cx25821: prevent out-of-bounds read on array card
2018-05-25 16:17:58 +02:00
memory
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
memstick
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
message
scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
2018-05-25 16:17:47 +02:00
mfd
mfd: twl6040: Fix child-node lookup
2017-12-29 17:53:46 +01:00
misc
cxl: Check if PSL data-cache is available before issue flush request
2018-05-30 07:52:33 +02:00
mmc
mmc: sdhci-iproc: add SDHCI_QUIRK2_HOST_OFF_CARD_ON for cygnus
2018-05-30 07:51:48 +02:00
mtd
mtd: rawnand: tango: Fix struct clk memory leak
2018-05-01 12:58:19 -07:00
mux
mux: core: fix double get_device()
2018-01-17 09:45:27 +01:00
net
i40e: Add delay after EMP reset for firmware to recover
2018-05-30 07:52:41 +02:00
nfc
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ntb
ntb_transport: Fix bug with max_mw_size parameter
2018-04-26 11:02:13 +02:00
nubus
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
nvdimm
libnvdimm, namespace: use a safe lookup for dimm device name
2018-04-24 09:36:32 +02:00
nvme
nvme-pci: disable APST for Samsung NVMe SSD 960 EVO + ASUS PRIME Z370-A
2018-05-30 07:52:29 +02:00
nvmem
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
of
earlycon: Use a pointer table to fix __earlycon_table stride
2018-05-01 12:58:24 -07:00
oprofile
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
parisc
parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode
2018-05-30 07:52:28 +02:00
parport
parport_pc: Add support for WCH CH382L PCI-E single parallel port card.
2018-04-08 14:26:31 +02:00
pci
PCI: hv: Fix 2 hang issues in hv_compose_msi_msg()
2018-06-05 11:41:55 +02:00
pcmcia
PCMCIA / PM: Avoid noirq suspend aborts during suspend-to-idle
2018-05-30 07:52:39 +02:00
perf
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
phy
phy: qcom-qmp: Fix phy pipe clock gating
2018-05-30 07:52:36 +02:00
pinctrl
Revert "pinctrl: msm: Use dynamic GPIO numbering"
2018-06-05 11:41:55 +02:00
platform
platform/x86: asus-wireless: Fix NULL pointer dereference
2018-05-09 09:51:55 +02:00
pnp
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
power
power: supply: ltc2941-battery-gauge: Fix temperature units
2018-05-30 07:52:38 +02:00
powercap
…
pps
drivers/pps: use surrounding "if PPS" to remove numerous dependency checks
2017-09-08 18:26:51 -07:00
ps3
…
ptp
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
pwm
pwm: rcar: Fix a condition to prevent mismatch value setting to duty
2018-04-24 09:36:34 +02:00
rapidio
drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()'
2017-12-14 09:53:08 +01:00
ras
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
regulator
regulator: of: Add a missing 'of_node_put()' in an error handling path of 'of_regulator_match()'
2018-05-30 07:52:41 +02:00
remoteproc
remoteproc: imx_rproc: Fix an error handling path in 'imx_rproc_probe()'
2018-05-30 07:52:30 +02:00
reset
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
rpmsg
rpmsg: glink: Initialize the "intent_req_comp" completion variable
2017-12-20 10:10:29 +01:00
rtc
rtc: goldfish: Add missing MODULE_LICENSE
2018-05-25 16:18:02 +02:00
s390
vfio-ccw: fence off transport mode
2018-05-30 07:52:37 +02:00
sbus
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
scsi
cdrom: do not call check_disk_change() inside cdrom_open()
2018-05-30 07:52:34 +02:00
sfi
x86/boot: Fix memremap() related build failure
2017-07-20 11:37:58 +02:00
sh
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
sn
…
soc
soc: qcom: wcnss_ctrl: Fix increment in NV upload
2018-05-30 07:52:35 +02:00
spi
spi: bcm-qspi: fIX some error handling paths
2018-05-30 07:52:32 +02:00
spmi
spmi: pmic-arb: Move the ownership check to irq_chip callback
2017-08-28 13:52:22 +02:00
ssb
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
staging
staging: lustre: lmv: correctly iput lmo_root
2018-05-25 16:17:44 +02:00
target
scsi: target: Fix fortify_panic kernel exception
2018-05-09 09:51:51 +02:00
tc
…
tee
tee: shm: fix use-after-free via temporarily dropped reference
2018-05-22 18:53:57 +02:00
thermal
thermal: exynos: Propagate error value from tmu_read()
2018-05-16 10:10:30 +02:00
thunderbolt
thunderbolt: Prevent crash when ICM firmware is not running
2018-04-24 09:36:29 +02:00
tty
serial: altera: ensure port->regshift is honored consistently
2018-05-25 16:18:00 +02:00
uio
uio_hv_generic: check that host supports monitor page
2018-04-12 12:32:19 +02:00
usb
xhci: workaround for AMD Promontory disabled ports wakeup
2018-05-30 07:51:56 +02:00
uwb
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
vfio
vfio/pci: Virtualize Maximum Read Request Size
2018-04-24 09:36:34 +02:00
vhost
vhost: Fix vhost_copy_to_user()
2018-04-19 08:56:16 +02:00
video
fbdev: Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in sbusfb_ioctl_helper().
2018-05-30 07:52:12 +02:00
virt
virt: Convert to using %pOF instead of full_name
2017-08-29 08:52:51 -05:00
virtio
virtio_ring: fix num_free handling in error case
2018-03-15 10:54:32 +01:00
vlynq
…
vme
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
w1
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
watchdog
watchdog: asm9260_wdt: fix error handling in asm9260_wdt_probe()
2018-05-30 07:52:36 +02:00
xen
xen/acpi: off by one in read_acpi_id()
2018-05-30 07:52:26 +02:00
zorro
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:52:30 +02:00
Kconfig
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
Makefile
usb: build drivers/usb/common/ when USB_SUPPORT is set
2018-02-25 11:07:53 +01:00