shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-04-02 19:23:01 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
f40ff8d090895edae9e9eebabc65eb49d4e886c4
linux/drivers
History
Rustam Kovhaev 351fa2ac24 staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() 
commit fea22e159d upstream.

let's use usb_find_common_endpoints() to discover endpoints, it does all
necessary checks for type and xfer direction

remove memset() in hfa384x_create(), because we now assign endpoints in
prism2sta_probe_usb() and because create_wlan() uses kzalloc() to
allocate hfa384x struct before calling hfa384x_create()

Fixes: faaff97656 ("staging: wlan-ng: properly check endpoint types")
Reported-and-tested-by: syzbot+22794221ab96b0bab53a@syzkaller.appspotmail.com
Link: https://syzkaller.appspot.com/bug?extid=22794221ab96b0bab53a
Signed-off-by: Rustam Kovhaev <rkovhaev@gmail.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20200804145614.104320-1-rkovhaev@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-05-16 09:12:45 +09:00
..
accessibility
…
acpi
ACPICA: Do not increment operation_region reference counts for field units
2023-05-16 08:46:09 +09:00
amba
ARM: amba: Don't read past the end of sysfs "driver_override" buffer
2018-05-01 15:13:08 -07:00
amlogic
tee: disable by default
2023-05-12 16:27:16 +09:00
android
UPSTREAM: binder: Prevent context manager from incrementing ref 0
2023-05-16 08:54:24 +09:00
ata
libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks
2023-05-16 09:04:59 +09:00
atm
firestream: Fix memleak in fs_open
2023-05-16 09:12:16 +09:00
auxdisplay
auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
2018-02-13 12:35:55 +01:00
base
device property: Fix the secondary firmware node handling in set_primary_fwnode()
2023-05-16 08:57:44 +09:00
bcma
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
2023-05-15 16:46:34 +09:00
block
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2023-05-16 09:04:57 +09:00
bluetooth
Bluetooth: btusb: fix PM leak in error case of setup
2023-05-15 16:30:44 +09:00
bus
bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
2023-05-15 17:13:43 +09:00
cdrom
cdrom: respect device capabilities during opening action
2023-05-15 16:21:24 +09:00
char
agp/intel: Fix a memory leak on module initialisation failure
2023-05-16 08:46:11 +09:00
clk
clk: clk-atlas6: fix return value check in atlas6_clk_init()
2023-05-16 08:48:29 +09:00
clocksource
clocksource: dw_apb_timer_of: Fix missing clockevent timers
2023-05-15 17:33:19 +09:00
connector
…
cpufreq
cpufreq: powernv: Fix use-after-free
2023-05-15 17:14:58 +09:00
cpuidle
cpuidle: Fix three reference count leaks
2023-05-15 17:34:06 +09:00
crypto
crypto: ccp - Fix use of merged scatterlists
2023-05-16 08:47:23 +09:00
dax
device-dax: implement ->split() to catch invalid munmap attempts
2018-02-28 10:18:33 +01:00
dca
…
devfreq
PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency
2023-05-15 16:58:51 +09:00
dio
…
dma
dmaengine: pl330: Fix burst length if burst size is smaller than bus width
2023-05-16 09:04:30 +09:00
dma-buf
dma-buf: Fix memory leak in sync_file_merge()
2023-05-15 16:17:55 +09:00
edac
EDAC/ie31200: Fallback if host bridge device is already initialized
2023-05-16 08:57:04 +09:00
eisa
…
extcon
extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()'
2023-05-16 08:19:49 +09:00
firewire
net: add annotations on hh->hh_len lockless accesses
2023-05-15 16:31:00 +09:00
firmware
efi: Make it possible to disable efivar_ssdt entirely
2023-05-16 08:29:32 +09:00
fmc
…
fpga
…
gpio
gpio: fix oops resulting from calling of_get_named_gpio(NULL, ...)
2023-05-16 08:45:31 +09:00
gpu
drm/nouveau: Fix reference count leak in nouveau_connector_detect
2023-05-16 08:56:58 +09:00
hardkernel
ODROID-G12: Make hid-multitouch and dwav-usb-mt driver as mouldes.
2022-03-15 09:20:56 +09:00
hid
HID: core: Sanitize event code and type when mapping input
2023-05-16 09:04:06 +09:00
hsi
HSI: ssi_protocol: double free in ssip_pn_xmit()
2018-03-24 11:00:12 +01:00
hv
Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels
2023-05-15 10:45:29 +09:00
hwmon
hwmon: (applesmc) check status earlier.
2023-05-16 09:04:09 +09:00
hwspinlock
…
hwtracing
intel_th: Fix user-visible error codes
2023-05-15 17:11:00 +09:00
i2c
i2c: rcar: in slave mode, clear NACK earlier
2023-05-16 08:57:12 +09:00
ide
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2023-05-16 09:04:57 +09:00
idle
x86/cpu: Sanitize FAM6_ATOM naming
2023-05-15 12:46:28 +09:00
iio
iio:accel:mma8452: Fix timestamp alignment and prevent data leak.
2023-05-16 09:12:43 +09:00
infiniband
RDMA/rxe: Drop pointless checks in rxe_init_ports
2023-05-16 09:12:10 +09:00
input
Input: psmouse - add a newline when printing 'proto' by sysfs
2023-05-16 08:54:50 +09:00
iommu
iommu/vt-d: Serialize IOMMU GCMD register modifications
2023-05-16 09:04:35 +09:00
ipack
…
irqchip
irqchip/gic: Atomically update affinity
2023-05-16 08:31:09 +09:00
isdn
staging: gigaset: add endpoint-type sanity check
2023-05-15 16:15:52 +09:00
leds
leds: core: Flush scheduled work for system suspend
2023-05-16 08:46:35 +09:00
lguest
…
lightnvm
…
macintosh
drivers/macintosh: Fix memleak in windfarm_pm112 driver
2023-05-15 17:34:39 +09:00
mailbox
mailbox: handle failed named mailbox channel request
2023-05-15 14:08:07 +09:00
mcb
MCB: add support for SC31 to mcb-lpc
2017-09-09 17:39:41 +02:00
md
dm thin metadata: Avoid returning cmd->bm wild pointer on error
2023-05-16 09:05:01 +09:00
media
media: davinci: vpif_capture: fix potential double free
2023-05-16 08:57:05 +09:00
memory
memory: tegra: Fix integer overflow on tick value calculation
2023-05-15 12:52:51 +09:00
memstick
memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
2023-05-15 14:51:01 +09:00
message
scsi: mptscsih: Fix read sense data size
2023-05-16 08:29:41 +09:00
mfd
mfd: dln2: Run event handler loop under spinlock
2023-05-16 08:48:39 +09:00
misc
cxl: Fix kobject memleak
2023-05-16 08:46:23 +09:00
mmc
mmc: sdhci-esdhc-imx: fix the mask for tuning start point
2023-05-15 17:34:04 +09:00
mtd
mtd: properly check all write ioctls for permissions
2023-05-16 08:45:03 +09:00
net
drivers/net/wan/hdlc_cisco: Add hard_header_len
2023-05-16 09:12:23 +09:00
nfc
NFC: st95hf: Fix memleak in st95hf_in_send_cmd
2023-05-16 09:12:14 +09:00
ntb
ntb: intel: fix return value for ndev_vec_mask()
2023-05-15 15:18:34 +09:00
nubus
…
nvdimm
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2023-05-16 09:04:57 +09:00
nvme
nvmet: Disable keep-alive timer when kato is cleared to 0h
2023-05-16 09:04:10 +09:00
nvmem
nvmem: qfprom: remove incorrect write support
2023-05-15 17:31:34 +09:00
of
of: unittest: kmemleak in of_unittest_platform_populate()
2023-05-15 17:16:01 +09:00
oprofile
…
parisc
parisc: mask out enable and reserved bits from sba imask
2023-05-16 08:47:32 +09:00
parport
parport: load lowlevel driver if ports not found
2023-05-15 16:19:36 +09:00
pci
PCI: Fix pci_create_slot() reference count leak
2023-05-16 08:56:52 +09:00
pcmcia
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
2023-05-15 09:18:55 +09:00
perf
drivers/perf: arm_pmu: Fix failure path in PM notifier
2023-05-15 14:09:37 +09:00
phy
phy: phy-twl4030-usb: fix denied runtime access
2023-05-15 15:10:20 +09:00
pinctrl
pinctrl-single: fix pcs_parse_pinconf() return value
2023-05-16 08:47:11 +09:00
platform
platform/x86: intel-vbtn: Fix return value check in check_acpi_dev()
2023-05-16 08:45:44 +09:00
pnp
…
power
power: supply: check if calc_soc succeeded in pm860x_init_battery
2023-05-16 08:46:54 +09:00
powercap
x86/cpu: Sanitize FAM6_ATOM naming
2023-05-15 12:46:28 +09:00
pps
drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
2023-05-15 14:08:51 +09:00
ps3
…
ptp
ptp: free ptp device pin descriptors properly
2023-05-15 17:27:25 +09:00
pwm
pwm: bcm-iproc: handle clk_get_rate() return
2023-05-16 08:48:30 +09:00
rapidio
rapidio: fix an error in get_user_pages_fast() error handling
2023-05-15 17:29:33 +09:00
ras
…
regulator
regulator: rk808: Lower log level on optional GPIOs being not available
2023-05-15 16:58:29 +09:00
remoteproc
remoteproc: Fix wrong rvring index computation
2023-05-15 17:23:50 +09:00
reset
reset: Fix potential use-after-free in __of_reset_control_get()
2023-05-15 15:12:21 +09:00
rpmsg
rpmsg: smd: fix memory leak on channel create
2023-05-15 09:23:11 +09:00
rtc
rtc: pm8xxx: Fix issue in RTC write path
2023-05-15 17:15:54 +09:00
s390
s390/cio: add cond_resched() in the slow_eval_known_fn() loop
2023-05-16 08:57:18 +09:00
sbus
drivers/sbus/char: add of_node_put()
2023-05-15 10:37:00 +09:00
scsi
scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA
2023-05-16 09:12:12 +09:00
sfi
…
sh
…
sn
…
soc
soc: qcom: smem: Use le32_to_cpu for comparison
2023-05-15 17:15:58 +09:00
spi
spi: spidev: fix a race between spidev_release and spidev_remove
2023-05-16 08:31:13 +09:00
spmi
spmi: Include OF based modalias in device uevent
2017-07-27 15:08:08 -07:00
ssb
ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
2023-05-15 12:59:29 +09:00
staging
staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
2023-05-16 09:12:45 +09:00
target
scsi: target: tcmu: Fix crash on ARM during cmd completion
2023-05-16 08:56:38 +09:00
tc
TC: Set DMA masks for devices
2023-05-15 09:23:01 +09:00
tee
Amlogic: sync the code from mainline. [1/1]
2020-02-04 13:48:58 +09:00
thermal
thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430
2023-05-16 09:04:36 +09:00
thunderbolt
thunderbolt: Use 32-bit writes when writing ring producer/consumer
2023-05-15 14:55:28 +09:00
tty
serial: 8250: change lock order in serial8250_do_startup()
2023-05-16 08:57:35 +09:00
uio
uio_pdrv_genirq: fix use without device tree and no interrupt
2023-05-16 08:31:00 +09:00
usb
USB: core: add helpers to retrieve endpoints
2023-05-16 09:12:44 +09:00
uwb
uwb: hwa-rc: fix memory leak at probe
2023-05-15 08:28:33 +09:00
vfio
vfio/pci: Fix SR-IOV VF handling with MMIO blocking
2023-05-16 09:05:50 +09:00
vhost
vhost: vsock: kick send_pkt worker once device is started
2023-05-15 17:25:24 +09:00
video
fbcon: prevent user font height or width change from causing potential out-of-bounds access
2023-05-16 08:57:26 +09:00
virt
drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
2023-05-15 12:50:46 +09:00
virtio
virtio_ring: Avoid loop when vq is broken in virtqueue_poll
2023-05-16 08:54:57 +09:00
vlynq
…
vme
vme: bridges: reduce stack usage
2023-05-15 16:59:11 +09:00
w1
w1: omap-hdq: cleanup to add missing newline for some dev_dbg
2023-05-15 17:34:48 +09:00
watchdog
watchdog: f71808e_wdt: clear watchdog timeout occurred flag
2023-05-16 08:48:16 +09:00
xen
xen/xenbus: Fix granting of vmalloc'd memory
2023-05-16 09:04:14 +09:00
zorro
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:50:44 +02:00
Kconfig
ODROID: sysfs: Add poweroff_trigger sysfs node.
2019-12-11 18:21:09 +09:00
Makefile
ODROID: sysfs: Add poweroff_trigger sysfs node.
2019-12-11 18:21:09 +09:00