shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-03-31 10:13:04 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
dedfc35a2de2bae9fa3da8210a05bfd515f83fee
linux/drivers
History
F.A.Sulaiman dedfc35a2d HID: betop: fix slab-out-of-bounds Write in betop_probe 
commit 1e4ce418b1 upstream.

Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver.
The problem is the driver assumes the device must have an input report but
some malicious devices violate this assumption.

So this patch checks hid_device's input is non empty before it's been used.

Reported-by: syzbot+07efed3bc5a1407bd742@syzkaller.appspotmail.com
Signed-off-by: F.A. SULAIMAN <asha.16@itfac.mrt.ac.lk>
Reviewed-by: Pavel Skripkin <paskripkin@gmail.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-10-06 15:56:03 +02:00
..
accessibility
speakup: fix uninitialized flush_lock
2020-12-30 11:53:44 +01:00
acpi
ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect
2021-10-06 15:55:46 +02:00
amba
amba: Fix resource leak for drivers without .remove
2021-03-04 11:38:02 +01:00
android
binder: make sure fd closes complete
2021-09-30 10:10:59 +02:00
ata
ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
2021-09-18 13:40:23 +02:00
atm
atm: nicstar: register the interrupt handler in the right place
2021-07-19 09:44:52 +02:00
auxdisplay
auxdisplay: ht16k33: Fix refresh rate handling
2021-03-04 11:38:00 +01:00
base
PM: sleep: core: Avoid setting power.must_resume to false
2021-09-26 14:08:58 +02:00
bcma
bcma: Fix memory leak for internally-handled cores
2021-09-15 09:50:45 +02:00
block
Revert "block: nbd: add sanity check for first_minor"
2021-09-16 12:51:23 +02:00
bluetooth
Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
2021-09-03 10:09:28 +02:00
bus
bus: fsl-mc: fix mmio base address for child DPRCs
2021-09-18 13:40:20 +02:00
cdrom
cdrom: gdrom: initialize global variable at init time
2021-05-26 12:06:55 +02:00
char
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
2021-09-15 09:50:30 +02:00
clk
treewide: Change list_sort to use const pointers
2021-09-30 10:11:04 +02:00
clocksource
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
2021-09-15 09:50:29 +02:00
connector
…
counter
counter: 104-quad-8: Return error when invalid mode during ceiling_write
2021-09-15 09:50:38 +02:00
cpufreq
cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
2021-10-06 15:55:46 +02:00
cpuidle
cpuidle: pseries: Mark pseries_idle_proble() as __init
2021-09-18 13:40:12 +02:00
crypto
crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
2021-10-06 15:56:03 +02:00
dax
device-dax: Fix default return code of range_parse()
2021-03-04 11:38:15 +01:00
dca
…
devfreq
PM / devfreq: Add missing error code in devfreq_add_device()
2021-07-14 16:56:11 +02:00
dio
…
dma
dmaengine: xilinx_dma: Set DMA mask for coherent APIs
2021-09-26 14:09:00 +02:00
dma-buf
dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
2021-09-26 14:08:59 +02:00
edac
EDAC/dmc520: Assign the proper type to dimm->edac_mode
2021-09-30 10:11:08 +02:00
eisa
…
extcon
extcon: intel-mrfld: Sync hardware and software state on init
2021-07-19 09:45:00 +02:00
firewire
firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
2021-04-07 15:00:11 +02:00
firmware
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
2021-09-15 09:50:41 +02:00
fpga
fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
2021-09-30 10:11:04 +02:00
fsi
fsi: Add missing MODULE_DEVICE_TABLE
2021-07-20 16:05:42 +02:00
gnss
…
gpio
gpio: pca953x: do not ignore i2c errors
2021-10-06 15:55:48 +02:00
gpu
drm/i915/request: fix early tracepoints
2021-10-06 15:55:54 +02:00
greybus
…
hid
HID: betop: fix slab-out-of-bounds Write in betop_probe
2021-10-06 15:56:03 +02:00
hsi
HSI: core: fix resource leaks in hsi_add_client_from_dt()
2021-05-14 09:50:28 +02:00
hv
drivers: hv: Fix missing error code in vmbus_connect()
2021-07-14 16:55:59 +02:00
hwmon
hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller
2021-10-06 15:55:59 +02:00
hwspinlock
…
hwtracing
intel_th: Wait until port is in reset before programming it
2021-07-20 16:05:46 +02:00
i2c
i2c: xlp9xx: fix main IRQ check
2021-09-15 09:50:44 +02:00
i3c
Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register"
2021-05-14 09:50:05 +02:00
ide
ide/falconide: Fix module unload
2021-03-04 11:38:21 +01:00
idle
intel_idle: Build fix
2020-12-03 10:00:23 +01:00
iio
iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
2021-09-18 13:40:18 +02:00
infiniband
RDMA/hns: Fix inaccurate prints
2021-10-06 15:55:55 +02:00
input
Input: hideep - fix the uninitialized use in hideep_nvm_unlock()
2021-07-20 16:05:44 +02:00
interconnect
treewide: Change list_sort to use const pointers
2021-09-30 10:11:04 +02:00
iommu
iommu/amd: Relocate GAMSup check to early_enable_iommus
2021-09-26 14:08:59 +02:00
ipack
ipack: ipoctal: fix module reference leak
2021-10-06 15:56:01 +02:00
irqchip
irqchip/gic-v3-its: Fix potential VPE leak on error
2021-09-30 10:11:05 +02:00
isdn
mISDN: fix possible use-after-free in HFC_cleanup()
2021-07-19 09:44:38 +02:00
leds
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
2021-09-15 09:50:36 +02:00
lightnvm
lightnvm: fix memory leak when submit fails
2021-01-27 11:55:22 +01:00
macintosh
macintosh/adb-iop: Use big-endian autopoll mask
2021-03-04 11:37:42 +01:00
mailbox
soc: mediatek: cmdq: add address shift in jump
2021-09-18 13:40:16 +02:00
mcb
mcb: fix error handling in mcb_alloc_bus()
2021-09-30 10:11:00 +02:00
md
md: fix a lock order reversal in md_alloc
2021-09-30 10:11:05 +02:00
media
media: ir_toy: prevent device from hanging during transmit
2021-10-06 15:55:49 +02:00
memory
memory: tegra: Fix compilation warnings on 64bit platforms
2021-07-25 14:36:14 +02:00
memstick
memstick: rtsx_usb_ms: fix UAF
2021-07-14 16:55:53 +02:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2020-10-26 16:57:18 -04:00
mfd
mfd: lpc_sch: Rename GPIOBASE to prevent build error
2021-09-22 12:28:06 +02:00
misc
treewide: Change list_sort to use const pointers
2021-09-30 10:11:04 +02:00
mmc
mmc: core: Return correct emmc response in case of ioctl error
2021-09-18 13:40:32 +02:00
most
…
mtd
mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
2021-09-22 12:28:04 +02:00
mux
…
net
usb: hso: remove the bailout parameter
2021-10-06 15:56:02 +02:00
nfc
nfc: nfcsim: fix use after free during module unload
2021-08-04 12:46:41 +02:00
ntb
NTB: perf: Fix an error code in perf_setup_inbuf()
2021-09-22 12:28:02 +02:00
nubus
…
nvdimm
libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
2021-09-18 13:40:36 +02:00
nvme
nvme: add command id quirk for apple controllers
2021-10-06 15:55:59 +02:00
nvmem
nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
2021-09-18 13:40:26 +02:00
of
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
2021-09-18 13:40:31 +02:00
opp
opp: Don't print an error if required-opps is missing
2021-09-18 13:40:29 +02:00
oprofile
…
parisc
parisc: Move pci_dev_is_behind_card_dino to where it is used
2021-09-26 14:08:59 +02:00
parport
parport: remove non-zero check on count
2021-09-18 13:40:34 +02:00
pci
treewide: Change list_sort to use const pointers
2021-09-30 10:11:04 +02:00
pcmcia
pcmcia: i82092: fix a null pointer dereference bug
2021-08-12 13:22:16 +02:00
perf
perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number
2021-07-14 16:56:08 +02:00
phy
phy: intel: Fix for warnings due to EMMC clock 175Mhz change in FIP
2021-07-20 16:05:46 +02:00
pinctrl
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
2021-09-18 13:40:14 +02:00
platform
platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
2021-09-30 10:11:01 +02:00
pnp
PNP: fix kernel-doc markups
2020-10-27 19:23:04 +01:00
power
power: supply: max17042: handle fails of reading status register
2021-09-18 13:40:08 +02:00
powercap
Merge branch 'turbostat' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux
2020-11-10 10:02:31 -08:00
pps
…
ps3
powerpc/ps3: use dma_mapping_error()
2020-12-30 11:53:53 +01:00
ptp
ptp_pch: Restore dependency on PCI
2021-08-26 08:35:46 -04:00
pwm
pwm: stm32-lp: Don't modify HW state in .remove() callback
2021-09-26 14:09:01 +02:00
rapidio
rapidio: handle create_workqueue() failure
2021-05-26 12:06:52 +02:00
ras
RAS/CEC: Correct ce_add_elem()'s returned values
2021-04-14 08:42:12 +02:00
regulator
regulator: vctrl: Avoid lockdep warning in enable/disable ops
2021-09-15 09:50:30 +02:00
remoteproc
remoteproc: k3-r5: Fix an error message
2021-07-20 16:05:50 +02:00
reset
reset: reset-zynqmp: Fixed the argument data type
2021-09-08 08:49:00 +02:00
rpmsg
rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data()
2021-05-19 10:13:02 +02:00
rtc
rtc: rx8010: select REGMAP_I2C
2021-09-26 14:09:02 +02:00
s390
s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
2021-09-30 10:11:03 +02:00
sbus
…
scsi
scsi: csiostor: Add module softdep on cxgb4
2021-10-06 15:55:56 +02:00
sfi
…
sh
…
siox
…
slimbus
slimbus: ngd: reset dma setup during runtime pm
2021-08-26 08:35:55 -04:00
soc
soc: aspeed: p2a-ctrl: Fix boundary check for mmap
2021-09-18 13:40:08 +02:00
soundwire
soundwire: intel: fix potential race condition during power down
2021-09-18 13:40:31 +02:00
spi
spi: Fix tegra20 build with CONFIG_PM=n
2021-09-30 10:11:07 +02:00
spmi
spmi: spmi-pmic-arb: Fix hw_irq overflow
2021-03-04 11:38:40 +01:00
ssb
ssb: Fix error return code in ssb_bus_scan()
2021-07-14 16:56:21 +02:00
staging
comedi: Fix memory leak in compat_insnlist()
2021-09-30 10:11:01 +02:00
target
scsi: target: Fix the pgr/alua_support_store functions
2021-09-30 10:11:03 +02:00
tc
…
tee
tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag
2021-08-15 14:00:24 +02:00
thermal
thermal/drivers/int340x: Do not set a wrong tcc offset on resume
2021-09-30 10:11:08 +02:00
thunderbolt
thunderbolt: Fix port linking by checking all adapters
2021-09-18 13:40:27 +02:00
tty
tty: Fix out-of-bound vmalloc access in imageblit
2021-10-06 15:55:45 +02:00
uio
uio_hv_generic: Fix a memory leak in error handling paths
2021-05-26 12:06:52 +02:00
usb
usb: cdns3: fix race condition before setting doorbell
2021-10-06 15:55:46 +02:00
vdpa
vdpa/mlx5: Avoid destroying MR on empty iotlb
2021-08-26 08:35:42 -04:00
vfio
vfio: Use config not menuconfig for VFIO_NOIOMMU
2021-09-18 13:40:12 +02:00
vhost
vhost_net: fix OoB on sendmsg() failure.
2021-09-22 12:27:58 +02:00
video
backlight: ktd253: Stabilize backlight
2021-09-22 12:28:02 +02:00
virt
nitro_enclaves: Fix stale file descriptors on failed usercopy
2021-05-11 14:47:11 +02:00
virtio
virtio_vdpa: reject invalid vq indices
2021-09-03 10:09:27 +02:00
visorbus
visorbus: fix error return code in visorchipset_init()
2021-07-14 16:56:41 +02:00
vlynq
…
vme
…
w1
w1: ds2438: fixing bug that would always get page0
2021-07-20 16:05:39 +02:00
watchdog
watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if appropriate
2021-09-22 12:28:01 +02:00
xen
xen/balloon: fix balloon kthread freezing
2021-09-30 10:11:08 +02:00
zorro
…
Kconfig
…
Makefile
vdpa: mlx5: fix vdpa/vhost dependencies
2020-12-02 04:09:56 -05:00