Anton Vasilyev ad38161f6c tty: rocket: Fix possible buffer overwrite on register_PCI ...

[ Upstream commit 0419056ec8 ]

If number of isa and pci boards exceed NUM_BOARDS on the path
rp_init()->init_PCI()->register_PCI() then buffer overwrite occurs
in register_PCI() on assign rcktpt_io_addr[i].

The patch adds check on upper bound for index of registered
board in register_PCI.

Found by Linux Driver Verification project (linuxtesting.org).

Signed-off-by: Anton Vasilyev <vasilyev@ispras.ru>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-15 08:14:01 +09:00

..

hvc

hvc_opal: don't set tb_ticks_per_usec in udbg_init_opal_common()

2023-05-12 16:39:49 +09:00

ipwireless

tty: ipwireless, cleanup TIOCGSERIAL

2016-06-25 08:56:30 -07:00

serial

uart: fix race between uart_put_char() and uart_shutdown()

2023-05-12 17:23:18 +09:00

vt

vt: selection, close sel_buffer race (CVE-2020-8648)

2020-12-17 17:32:09 +09:00

amiserial.c

tty: Replace ASYNC_INITIALIZED bit and update atomically

2016-04-30 09:26:55 -07:00

bfin_jtag_comm.c

…

cyclades.c

tty: stop defining STD_COM_FLAGS in drivers

2016-06-25 08:56:30 -07:00

ehv_bytechan.c

drivers/tty: make ehv_bytechan.c explicitly non-modular

2016-02-06 23:26:43 -08:00

goldfish.c

tty: goldfish: Fix a parameter of a call to free_irq

2017-10-08 10:26:05 +02:00

isicom.c

tty: Replace ASYNC_INITIALIZED bit and update atomically

2016-04-30 09:26:55 -07:00

Kconfig

devpts: Make each mount of devpts an independent filesystem.

2016-06-05 10:36:01 -07:00

Makefile

…

metag_da.c

timers, drivers/tty/metag_da: Initialize the poll timer as pinned

2016-07-07 10:25:14 +02:00

mips_ejtag_fdc.c

timers, drivers/tty/mips_ejtag: Initialize the poll timer as pinned

2016-07-07 10:34:59 +02:00

moxa.c

tty: Replace ASYNC_INITIALIZED bit and update atomically

2016-04-30 09:26:55 -07:00

moxa.h

…

mxser.c

tty: cyclades+mxser, do not initialize to zero

2016-06-25 08:56:30 -07:00

mxser.h

…

n_gsm.c

tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set

2018-05-01 15:13:06 -07:00

n_hdlc.c

tty: n_hdlc: get rid of racy n_hdlc.tbuf

2017-03-15 10:02:40 +08:00

n_r3964.c

tty: r3964: Replace/remove bogus tty lock use

2015-10-17 21:11:29 -07:00

n_tracerouter.c

n_tracerouter: stop including <asm-generic/bug>

2015-10-15 00:21:10 +02:00

n_tracesink.c

n_tracesink: stop including <asm-generic/bug>

2015-10-15 00:21:11 +02:00

n_tracesink.h

…

n_tty.c

n_tty: Access echo_* variables carefully.

2018-07-11 16:26:41 +02:00

nozomi.c

tty: Replace TTY_THROTTLED bit tests with tty_throttled()

2016-04-30 09:26:55 -07:00

pty.c

tty: Fix data race in tty_insert_flip_string_fixed_flag

2023-05-12 16:42:37 +09:00

rocket_int.h

tty: rocket: Remove private close_wait

2016-01-28 14:13:44 -08:00

rocket.c

tty: rocket: Fix possible buffer overwrite on register_PCI

2023-05-15 08:14:01 +09:00

rocket.h

…

synclink_gt.c

Merge tag 'tty-4.7-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

2016-05-20 20:57:27 -07:00

synclink.c

Merge tag 'tty-4.7-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

2016-05-20 20:57:27 -07:00

synclinkmp.c

Merge tag 'tty-4.7-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

2016-05-20 20:57:27 -07:00

sysrq.c

debug: add watchdog trigger in sysrq

2018-05-09 21:14:17 -07:00

tty_audit.c

tty: audit: remove unused variable

2016-03-07 16:11:14 -08:00

tty_buffer.c

tty: fix tty_ldisc_receive_buf() documentation

2018-01-02 20:35:17 +01:00

tty_io.c

tty: Don't call panic() at tty_ldisc_init()

2018-05-01 15:13:05 -07:00

tty_ioctl.c

tty: Replace TTY_THROTTLED bit tests with tty_throttled()

2016-04-30 09:26:55 -07:00

tty_ldisc.c

tty: Use __GFP_NOFAIL for tty_ldisc_get()

2018-05-01 15:13:06 -07:00

tty_ldsem.c

tty: Deinline __ldsem_down_write_nested, save 128 bytes

2015-12-13 19:59:48 -08:00

tty_mutex.c

Merge 4.5-rc4 into tty-next

2016-02-14 14:36:04 -08:00

tty_port.c

tty: Replace ASYNC_INITIALIZED bit and update atomically

2016-04-30 09:26:55 -07:00