shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-08 03:40:35 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
cfd653e839b2b26b68368d2bb2491ecc0200d83a
linux/drivers
History
Daniel Vetter cfd653e839 drm: limit to INT_MAX in create_blob ioctl 
commit 5bf8bec3f4 upstream.

The hardened usercpy code is too paranoid ever since commit 6a30afa8c1fb
("uaccess: disallow > INT_MAX copy sizes")

Code itself should have been fine as-is.

Link: http://lkml.kernel.org/r/20191106164755.31478-1-daniel.vetter@ffwll.ch
Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
Reported-by: syzbot+fb77e97ebf0612ee6914@syzkaller.appspotmail.com
Fixes: 6a30afa8c1fb ("uaccess: disallow > INT_MAX copy sizes")
Cc: Kees Cook <keescook@chromium.org>
Cc: Alexander Viro <viro@zeniv.linux.org.uk>
Cc: Stephen Rothwell <sfr@canb.auug.org.au>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-01-04 19:18:43 +01:00
..
accessibility
…
acpi
ACPI: button: Add DMI quirk for Medion Akoya E2215T
2019-12-31 16:44:26 +01:00
amba
Merge tag 'for-linus' of git://git.armlinux.org.uk/~rmk/linux-arm
2019-10-23 06:26:33 -04:00
android
binder: fix incorrect calculation for num_valid
2019-12-17 19:55:33 +01:00
ata
libata: Ensure ata_port probe has completed before detach
2019-12-31 16:44:31 +01:00
atm
atm: he: clean up an indentation issue
2019-09-25 13:54:45 +02:00
auxdisplay
Merge tag 'docs-5.4' of git://git.lwn.net/linux
2019-09-17 16:22:26 -07:00
base
firmware_loader: Fix labels with comma for builtin firmware
2019-12-31 16:45:39 +01:00
bcma
bcma: make arrays pwr_info_offset and sprom_sizes static const, shrinks object size
2019-09-13 16:44:49 +03:00
block
nbd: fix shutdown and recv work deadlock v2
2019-12-31 16:46:34 +01:00
bluetooth
Bluetooth: btusb: avoid unused function warning
2019-12-31 16:44:08 +01:00
bus
bus: ti-sysc: Fix watchdog quirk handling
2019-10-18 08:45:32 -07:00
cdrom
cdrom: respect device capabilities during opening action
2020-01-04 19:18:25 +01:00
char
tpm: fix invalid locking in NONBLOCKING mode
2019-12-31 16:45:52 +01:00
clk
clk: pxa: fix one of the pxa RTC clocks
2020-01-04 19:18:11 +01:00
clocksource
clocksource/drivers/timer-of: Use unique device name instead of timer
2020-01-04 19:17:08 +01:00
connector
…
counter
…
cpufreq
cpufreq: Register drivers only after CPU devices have been registered
2019-12-31 16:45:26 +01:00
cpuidle
cpuidle: use first valid target residency as poll time
2019-12-17 19:56:23 +01:00
crypto
crypto: vmx - Avoid weird build failures
2019-12-31 16:45:45 +01:00
dax
…
dca
…
devfreq
PM / devfreq: Lock devfreq in trans_stat_show
2019-12-17 19:56:26 +01:00
dio
…
dma
dmaengine: fsl-qdma: Handle invalid qdma-queue0 IRQ
2020-01-04 19:17:01 +01:00
dma-buf
dma-buf: Fix memory leak in sync_file_merge()
2019-12-21 11:04:48 +01:00
edac
EDAC/ghes: Fix grain calculation
2019-12-31 16:45:16 +01:00
eisa
…
extcon
extcon: sm5502: Reset registers during initialization
2019-12-31 16:44:04 +01:00
firewire
…
firmware
efi/memreserve: Register reservations as 'reserved' in /proc/iomem
2019-12-31 16:46:06 +01:00
fpga
Merge tag 'char-misc-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2019-09-18 11:14:31 -07:00
fsi
fsi: core: Fix small accesses and unaligned offsets via sysfs
2019-12-31 16:45:09 +01:00
gnss
…
gpio
gpio: lynxpoint: Setup correct IRQ handlers
2020-01-04 19:18:20 +01:00
gpu
drm: limit to INT_MAX in create_blob ioctl
2020-01-04 19:18:43 +01:00
greybus
staging: greybus: move es2 to drivers/greybus/
2019-08-27 19:03:08 +02:00
hid
HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI transport device
2020-01-04 19:18:13 +01:00
hsi
Merge tag 'hsi-for-5.4' of git://git.kernel.org/pub/scm/linux/kernel/git/sre/linux-hsi
2019-09-22 12:02:21 -07:00
hv
Drivers: hv: vmbus: Fix crash handler reset of Hyper-V synic
2020-01-04 19:18:21 +01:00
hwmon
hwmon: (ina3221) Fix read timeout issue
2019-10-28 18:46:55 -07:00
hwspinlock
…
hwtracing
intel_th: msu: Fix window switching without windows
2019-12-31 16:46:09 +01:00
i2c
i2c: stm32f7: fix & reorder remove & probe error handling
2020-01-04 19:17:27 +01:00
i3c
i3c: master: Use dev_to_i3cmaster()
2019-08-27 09:43:59 +02:00
ide
…
idle
x86/intel: Aggregate microserver naming
2019-08-28 11:29:32 +02:00
iio
iio: dac: ad5446: Add support for new AD5600 DAC
2019-12-31 16:45:19 +01:00
infiniband
RDMA/siw: Fix post_recv QP state locking
2019-12-31 16:46:01 +01:00
input
Input: ili210x - handle errors from input_mt_init_slots()
2020-01-04 19:17:34 +01:00
interconnect
interconnect: qcom: qcs404: Walk the list safely on node removal
2019-12-17 19:55:39 +01:00
iommu
iommu/arm-smmu-v3: Don't display an error when IRQ lines are missing
2020-01-04 19:17:25 +01:00
ipack
…
irqchip
irqchip: ingenic: Error out if IRQ domain creation failed
2020-01-04 19:17:22 +01:00
isdn
net: use skb_queue_empty_lockless() in poll() handlers
2019-10-28 13:33:41 -07:00
leds
leds: trigger: netdev: fix handling on interface rename
2020-01-04 19:17:05 +01:00
lightnvm
lightnvm: print error when target is not found
2019-09-05 13:17:01 -06:00
macintosh
cpufreq: Use per-policy frequency QoS
2019-10-21 02:05:21 +02:00
mailbox
mailbox: imx: Fix Tx doorbell shutdown path
2020-01-04 19:18:30 +01:00
mcb
…
md
md: make sure desc_nr less than MD_SB_DISKS
2020-01-04 19:18:34 +01:00
media
media: vim2m: media_device_cleanup was called too early
2019-12-31 16:45:17 +01:00
memory
iommu/mediatek: Clean up struct mtk_smi_iommu
2019-08-30 15:57:27 +02:00
memstick
memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
2019-10-09 11:08:03 +02:00
message
…
mfd
mfd: mt6397: Fix probe after changing mt6397-core
2019-10-24 08:49:25 +01:00
misc
habanalabs: skip VA block list update in reset flow
2020-01-04 19:18:18 +01:00
mmc
mmc: sdhci: Add a quirk for broken command queuing
2019-12-31 16:46:33 +01:00
mtd
mtd: rawnand: Change calculating of position page containing BBM
2019-12-17 19:55:54 +01:00
mux
…
net
6pack,mkiss: fix possible deadlock
2020-01-04 19:18:36 +01:00
nfc
NFC: nxp-nci: Fix probing without ACPI
2019-12-31 16:41:49 +01:00
ntb
NTB: fix IDT Kconfig typos/spellos
2019-09-23 17:20:40 -04:00
nubus
…
nvdimm
libnvdimm/btt: fix variable 'rc' set but not used
2020-01-04 19:18:12 +01:00
nvme
nvme: Discard workaround for non-conformant devices
2019-12-31 16:45:24 +01:00
nvmem
nvmem: imx-ocotp: reset error status on probe
2019-12-31 16:44:42 +01:00
of
of: unittest: fix memory leak in attach_node_and_children
2020-01-04 19:18:25 +01:00
opp
opp: Reinitialize the list_kref before adding the static OPPs again
2019-10-23 10:58:44 +05:30
oprofile
…
parisc
parisc: Remove 32-bit DMA enforcement from sba_iommu
2019-10-14 21:44:26 +02:00
parport
parport: load lowlevel driver if ports not found
2019-12-31 16:45:25 +01:00
pci
PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info
2020-01-04 19:18:00 +01:00
pcmcia
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2019-09-28 08:14:15 -07:00
perf
Merge branches 'for-next/52-bit-kva', 'for-next/cpu-topology', 'for-next/error-injection', 'for-next/perf', 'for-next/psci-cpuidle', 'for-next/rng', 'for-next/smpboot', 'for-next/tbi' and 'for-next/tlbi' into for-next/core
2019-08-30 12:46:12 +01:00
phy
phy: qcom-usb-hs: Fix extcon double register after power cycle
2019-12-31 16:44:29 +01:00
pinctrl
pinctrl: baytrail: Really serialize all register accesses
2019-12-31 16:46:12 +01:00
platform
platform/x86: intel_pmc_core: Add Comet Lake (CML) platform support to intel_pmc_core driver
2020-01-04 19:18:19 +01:00
pnp
…
power
power: supply: cpcap-battery: Check voltage before orderly_poweroff
2019-12-31 16:44:12 +01:00
powercap
Merge tag 'pm-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2019-09-17 19:15:14 -07:00
pps
…
ps3
…
ptp
ptp: Introduce strict checking of external time stamp options.
2019-11-15 12:48:32 -08:00
pwm
pwm: bcm-iproc: Prevent unloading the driver module while in use
2019-11-08 18:38:06 +01:00
rapidio
…
ras
…
regulator
regulator: core: Let boot-on regulators be powered off
2019-12-31 16:45:32 +01:00
remoteproc
Merge tag 'rproc-v5.4' of git://git.kernel.org/pub/scm/linux/kernel/git/andersson/remoteproc
2019-09-22 10:55:08 -07:00
reset
reset: fix of_reset_control_get_count kerneldoc comment
2019-10-24 10:26:33 +02:00
rpmsg
rpmsg: glink: Free pending deferred work on remove
2019-12-21 11:04:41 +01:00
rtc
rtc: disable uie before setting time and enable after
2019-12-17 19:56:52 +01:00
s390
s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR
2020-01-04 19:18:27 +01:00
sbus
…
scsi
scsi: iscsi: Don't send data to unbound connection
2020-01-04 19:18:17 +01:00
sfi
…
sh
…
siox
…
slimbus
…
soc
soc: mediatek: cmdq: fixup wrong input order of write api
2019-12-13 08:42:40 +01:00
soundwire
soundwire: intel: fix PDI/stream mapping for Bulk
2019-12-31 16:45:11 +01:00
spi
spi: fsl: use platform_get_irq() instead of of_irq_to_resource()
2019-12-31 16:46:06 +01:00
spmi
…
ssb
ssb: make array pwr_info_offset static const, makes object smaller
2019-09-13 17:23:18 +03:00
staging
staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
2019-12-31 16:46:10 +01:00
target
scsi: target: iscsi: Wait for all commands to finish before freeing a session
2020-01-04 19:18:17 +01:00
tc
…
tee
tee/shm: untag user pointers in tee_shm_register
2019-09-25 17:51:41 -07:00
thermal
thermal: Fix deadlock in thermal thermal_zone_device_check
2019-12-13 08:43:21 +01:00
thunderbolt
thunderbolt: Power cycle the router if NVM authentication fails
2019-12-04 22:30:50 +01:00
tty
serial: sprd: Add clearing break interrupt operation
2019-12-31 16:46:11 +01:00
uio
Merge tag 'char-misc-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2019-09-18 11:14:31 -07:00
usb
USB: EHCI: Do not return -EPIPE when hub is disconnected
2019-12-31 16:46:07 +01:00
vfio
vfio/pci: call irq_bypass_unregister_producer() before freeing irq
2019-12-21 11:04:48 +01:00
vhost
vringh: fix copy direction of vringh_iov_push_kern()
2019-10-28 04:25:04 -04:00
video
video/hdmi: Fix AVI bar unpack
2019-12-17 19:56:42 +01:00
virt
virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr
2019-10-10 14:50:32 +02:00
virtio
virtio-balloon: fix managed page counts when migrating pages between zones
2019-12-17 19:55:56 +01:00
visorbus
…
vlynq
…
vme
…
w1
w1: ds250x: Fix build error without CRC16
2019-10-10 15:35:41 +02:00
watchdog
watchdog: Fix the race between the release of watchdog_core_data and cdev
2020-01-04 19:18:14 +01:00
xen
xen/gntdev: Use select for DMA_SHARED_BUFFER
2019-12-31 16:45:01 +01:00
zorro
…
Kconfig
Merge tag 'staging-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
2019-09-18 11:05:34 -07:00
Makefile
Merge tag 'staging-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
2019-09-18 11:05:34 -07:00