Ben Hutchings 6b63d77fbe USB: yurex: Check for truncation in yurex_read() ... [ Upstream commit 14427b8683 ] snprintf() always returns the full length of the string it could have printed, even if it was truncated because the buffer was too small. So in case the counter value is truncated, we will over-read from in_buffer and over-write to the caller's buffer. I don't think it's actually possible for this to happen, but in case truncation occurs, WARN and return -EIO. Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <alexander.levin@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-10-10 08:52:12 +02:00
..
sisusbvga
adutux.c
appledisplay.c
chaoskey.c
cypress_cy7c63.c
cytherm.c
ehset.c
emi26.c
emi62.c
ezusb.c
ftdi-elan.c
idmouse.c	USB: idmouse: fix NULL-deref at probe	2017-03-30 09:35:17 +02:00
iowarrior.c	USB: iowarrior: fix info ioctl on big-endian hosts	2017-05-25 14:30:13 +02:00
isight_firmware.c
Kconfig
ldusb.c	usb: ldusb: add PIDs for new CASSY devices supported by this driver	2018-02-28 10:17:23 +01:00
legousbtower.c	usb: misc: legousbtower: Fix memory leak	2017-05-25 14:30:07 +02:00
lvstest.c	USB: lvtest: fix NULL-deref at probe	2017-03-30 09:35:16 +02:00
Makefile
rio500_usb.h
rio500.c
trancevibrator.c
usb_u132.h
usb3503.c	usb: misc: usb3503: make sure reset is low for at least 100us	2018-01-17 09:35:31 +01:00
usblcd.c
usbled.c
usbsevseg.c
usbtest.c	usb: usbtest: fix NULL pointer dereference	2017-11-18 11:11:05 +01:00
uss720.c	usb: misc: uss720: Fix two sleep-in-atomic-context bugs	2018-09-26 08:35:08 +02:00
yurex.c	USB: yurex: Check for truncation in yurex_read()	2018-10-10 08:52:12 +02:00