Sudeep Holla 7e8645ca2c firmware: arm_scpi: Fix string overflow in SCPI genpd driver ...

commit 865ed67ab9 upstream.

Without the bound checks for scpi_pd->name, it could result in the buffer
overflow when copying the SCPI device name from the corresponding device
tree node as the name string is set at maximum size of 30.

Let us fix it by using devm_kasprintf so that the string buffer is
allocated dynamically.

Fixes: 8bec4337ad ("firmware: scpi: add device power domain support using genpd")
Reported-by: Pedro Batista <pedbap.g@gmail.com>
Signed-off-by: Sudeep Holla <sudeep.holla@arm.com>
Cc: stable@vger.kernel.org
Cc: Cristian Marussi <cristian.marussi@arm.com>
Link: https://lore.kernel.org/r/20211209120456.696879-1-sudeep.holla@arm.com'
Signed-off-by: Arnd Bergmann <arnd@arndb.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-12-22 09:19:04 +01:00

..

arm_scmi

firmware: arm_scmi: pm: Propagate return value to caller

2021-12-01 09:27:42 +01:00

broadcom

firmware: bcm47xx_nvram: Support small (0x6000 B) NVRAM partitions

2018-04-23 16:39:35 +01:00

efi

efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()

2021-10-20 11:23:02 +02:00

google

firmware: coreboot: Let OF core populate platform device

2020-01-27 14:49:55 +01:00

meson

firmware: meson-sm: rework meson_sm_init to use module_platform_driver_probe

2018-03-07 17:33:52 -08:00

tegra

firmware: tegra: adjust tested variable

2018-03-08 14:43:13 +01:00

arm_scpi.c

firmware: arm_scpi: Prevent the ternary sign expansion bug

2021-05-26 11:48:31 +02:00

arm_sdei.c

firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp

2020-10-01 13:14:35 +02:00

dcdbas.c

platform/x86: Fix dell driver init order

2018-03-14 11:05:53 -07:00

dcdbas.h

dcdbas: export functionality for use in other drivers

2009-01-08 08:31:12 -08:00

dell_rbu.c

firmware: dell_rbu: Make payload memory uncachable

2019-11-20 18:47:41 +01:00

dmi_scan.c

firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices

2020-01-27 14:51:19 +01:00

dmi-id.c

firmware: dmi: Add access to the SKU ID string

2018-06-17 14:09:42 +02:00

dmi-sysfs.c

firmware: dmi: handle missing DMI data gracefully

2018-02-03 11:25:20 +01:00

edd.c

edd: don't spam log if no EDD information is present

2018-03-27 09:51:23 +02:00

iscsi_ibft_find.c

efi: Make 'efi_enabled' a function to query EFI facilities

2013-01-30 11:51:59 -08:00

iscsi_ibft.c

iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND

2019-08-16 10:12:45 +02:00

Kconfig

firmware: qcom-scm: Fix QCOM_SCM configuration

2021-05-22 10:59:32 +02:00

Makefile

firmware: arm_scmi: add basic driver infrastructure for SCMI

2018-02-28 16:37:57 +00:00

memmap.c

drivers/firmware/memmap.c: fix kernel-doc format

2015-06-25 17:00:41 -07:00

pcdp.c

x86, mpparse, x86/acpi, x86/PCI, x86/dmi, SFI: Use memremap() for RAM mappings

2017-07-18 11:37:58 +02:00

pcdp.h

Update broken web addresses in the kernel.

2010-10-18 11:03:14 +02:00

psci_checker.c

firmware/psci: fix application of sizeof to pointer

2021-11-26 11:35:57 +01:00

psci.c

firmware/psci: Expose SMCCC version through psci_ops

2018-02-06 22:54:11 +00:00

qcom_scm-32.c

firmware: qcom: scm: Fix crash in qcom_scm_call_atomic1()

2018-05-24 22:36:45 -05:00

qcom_scm-64.c

firmware: qcom: scm: Ensure 'a0' status code is treated as signed

2019-12-17 20:35:42 +01:00

qcom_scm.c

firmware: qcom_scm: fix bogous abuse of dma-direct internals

2020-06-25 15:32:53 +02:00

qcom_scm.h

Merge tag 'rproc-v4.15' of git://github.com/andersson/remoteproc

2017-11-17 20:14:10 -08:00

qemu_fw_cfg.c

qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute

2021-07-20 16:16:04 +02:00

raspberrypi.c

firmware: raspberrypi: Fix firmware calls with large buffers

2019-12-13 08:51:26 +01:00

scpi_pm_domain.c

firmware: arm_scpi: Fix string overflow in SCPI genpd driver

2021-12-22 09:19:04 +01:00

ti_sci.c

firmware: ti_sci: Always request response from firmware

2019-09-19 09:09:39 +02:00

ti_sci.h

firmware: ti_sci: Switch to SPDX Licensing

2018-05-04 23:10:23 -07:00