linux/drivers/misc
Johan Hovold 5cf2a57c7a misc: fastrpc: fix memory corruption on open
commit d245f43aab upstream.

The probe session-duplication overflow check incremented the session
count also when there were no more available sessions so that memory
beyond the fixed-size slab-allocated session array could be corrupted in
fastrpc_session_alloc() on open().

Fixes: f6f9279f2b ("misc: fastrpc: Add Qualcomm fastrpc basic driver model")
Cc: stable@vger.kernel.org      # 5.1
Signed-off-by: Johan Hovold <johan+linaro@kernel.org>
Link: https://lore.kernel.org/r/20220829080531.29681-3-johan+linaro@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-09-08 11:11:37 +02:00
..
altera-stapl
c2port
cardreader misc: rtsx: Fix an error handling path in rtsx_pci_probe() 2022-08-21 15:15:55 +02:00
cb710 cb710: avoid NULL pointer subtraction 2021-10-20 11:45:00 +02:00
cxl cxl: Fix a memory leak in an error handling path 2022-08-25 11:38:15 +02:00
echo
eeprom eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() 2022-08-21 15:16:00 +02:00
genwqe
habanalabs habanalabs: Add check for pci_enable_device 2022-04-08 14:40:25 +02:00
ibmasm
lis3lv02d
lkdtm lkdtm/usercopy: Expand size of "out of frame" object 2022-06-14 18:32:41 +02:00
mei mei: me: add raptor lake point S DID 2022-06-22 14:13:18 +02:00
ocxl misc: ocxl: fix possible double free in ocxl_file_register_afu 2022-06-09 10:21:14 +02:00
sgi-gru
sgi-xp
ti-st
uacce uacce: Handle parent device removal or parent driver module rmmod 2022-08-25 11:38:14 +02:00
vmw_vmci
ad525x_dpot-i2c.c
ad525x_dpot-spi.c
ad525x_dpot.c
ad525x_dpot.h
apds990x.c
apds9802als.c
atmel_tclib.c
atmel-ssc.c misc: atmel-ssc: Fix IRQ check in ssc_probe 2022-06-22 14:13:16 +02:00
bh1770glc.c
cs5535-mfgpt.c
ds1682.c
dummy-irq.c
enclosure.c
fastrpc.c misc: fastrpc: fix memory corruption on open 2022-09-08 11:11:37 +02:00
hisi_hikey_usb.c
hmc6352.c
hpilo.c
hpilo.h
ibmvmc.c
ibmvmc.h
ics932s401.c
isl29003.c
isl29020.c
Kconfig
kgdbts.c kgdbts: fix return value of __setup handler 2022-04-08 14:40:28 +02:00
lattice-ecp3-config.c misc: lattice-ecp3-config: Fix task hung when firmware load failed 2022-01-27 10:54:08 +01:00
Makefile
pch_phub.c
pci_endpoint_test.c
phantom.c
pti.c
pvpanic.c
qcom-coincell.c
sram-exec.c
sram.c
sram.h
tifm_7xx1.c
tifm_core.c
tsl2550.c
vmw_balloon.c
xilinx_sdfec.c