Jann Horn ba20e67aee ibmasm: don't write out of bounds in read handler ... commit a0341fc198 upstream. This read handler had a lot of custom logic and wrote outside the bounds of the provided buffer. This could lead to kernel and userspace memory corruption. Just use simple_read_from_buffer() with a stack buffer. Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Cc: stable@vger.kernel.org Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-07-17 11:31:42 +02:00
..
altera-stapl
c2port	drivers/misc/c2port/c2port-duramar2150.c: checking for NULL instead of IS_ERR()	2017-06-26 07:13:10 +02:00
cb710
cxl	cxl: Check if vphb exists before iterating over AFU devices	2017-12-25 14:22:08 +01:00
echo
eeprom	eeprom: at24: check at24_read/write arguments	2017-12-05 11:22:51 +01:00
genwqe	GenWQE: Fix bad page access during abort of resource allocation	2016-11-10 16:36:33 +01:00
ibmasm	ibmasm: don't write out of bounds in read handler	2018-07-17 11:31:42 +02:00
lis3lv02d
mei	mei: remove dev_err message on an unsupported ioctl	2018-04-08 11:52:00 +02:00
mic	misc: mic/scif: fix wrap around tests	2016-05-04 14:48:51 -07:00
sgi-gru
sgi-xp
ti-st
vmw_vmci	drivers/misc/vmw_vmci/vmci_queue_pair.c: fix a couple integer overflow tests	2018-04-13 19:50:02 +02:00
ad525x_dpot-i2c.c
ad525x_dpot-spi.c
ad525x_dpot.c	drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors	2016-05-04 14:48:52 -07:00
ad525x_dpot.h
apds990x.c
apds9802als.c
arm-charlcd.c
atmel_tclib.c
atmel-ssc.c
bh1770glc.c
bh1780gli.c
bmp085-i2c.c
bmp085-spi.c
bmp085.c
bmp085.h
cs5535-mfgpt.c
ds1682.c
dummy-irq.c
enclosure.c	scsi: ses: don't get power status of SES device slot on probe	2018-03-22 09:23:24 +01:00
fsa9480.c
hmc6352.c
hpilo.c
hpilo.h
ics932s401.c
ioc4.c
isl29003.c
isl29020.c
Kconfig	misc/bmp085: Enable building as a module	2016-05-04 14:48:51 -07:00
kgdbts.c
lattice-ecp3-config.c
lkdtm.c
Makefile
pch_phub.c
phantom.c
pti.c
qcom-coincell.c
spear13xx_pcie_gadget.c
sram.c
ti_dac7512.c
tifm_7xx1.c
tifm_core.c
tsl2550.c
vexpress-syscfg.c
vmw_balloon.c	vmw_balloon: fixing double free when batching mode is off	2018-06-16 09:54:26 +02:00