malhuda/msm-4.14
1
0
Fork 0
mirror of https://github.com/rd-stuffs/msm-4.14.git synced 2025-02-20 11:45:48 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
msm-4.14/drivers
History
Hyunwoo Kim 9556a88a16 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write 
[ Upstream commit a09d2d00af53b43c6f11e6ab3cb58443c2cac8a7 ]

In pxa3xx_gcu_write, a count parameter of type size_t is passed to words of
type int.  Then, copy_from_user() may cause a heap overflow because it is used
as the third argument of copy_from_user().

Signed-off-by: Hyunwoo Kim <imv4bel@gmail.com>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-09-28 10:56:49 +02:00
..
accessibility
…
acpi
ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
2022-08-25 11:11:32 +02:00
amba
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2021-11-12 14:28:22 +01:00
android
binder: fix UAF of ref->proc caused by race condition
2022-09-15 12:23:50 +02:00
ata
ata: libata-eh: Add missing command name
2022-08-25 11:11:31 +02:00
atm
atm: idt77252: fix use-after-free bugs caused by tst_timer
2022-08-25 11:11:33 +02:00
auxdisplay
auxdisplay: ht16k33: Fix frame buffer device blanking
2021-11-26 11:40:35 +01:00
base
driver core: Don't probe devices after bus_type.match() probe deferral
2022-09-15 12:23:52 +02:00
bcma
bcma: Fix memory leak for internally-handled cores
2021-09-22 11:45:22 +02:00
block
loop: Check for overflow while configuring loop
2022-09-05 10:25:05 +02:00
bluetooth
Bluetooth: hci_intel: Add check for platform_driver_register
2022-08-25 11:11:19 +02:00
bus
bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
2022-05-12 12:17:07 +02:00
cdrom
…
char
Revert "Revert "char/random: silence a lockdep splat with printk()""
2022-07-29 17:06:50 +02:00
clk
clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
2022-08-25 11:11:36 +02:00
clocksource
clocksource/drivers/sp804: Avoid error on multiple instances
2022-06-14 16:54:00 +02:00
connector
…
cpufreq
cpufreq: pmac32-cpufreq: Fix refcount leak bug
2022-07-21 20:42:46 +02:00
cpuidle
cpuidle: Fix kobject memory leaks in error paths
2021-11-26 11:40:29 +01:00
crypto
crypto: ccp - ccp_dmaengine_unregister release dma channels
2022-04-20 09:08:13 +02:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
2022-07-12 16:27:29 +02:00
dma-buf
…
edac
EDAC: Fix calculation of returned address and next offset in edac_align_ptr()
2022-02-23 11:57:35 +01:00
eisa
…
extcon
extcon: Modify extcon device to be created after driver data is set
2022-06-14 16:54:00 +02:00
firewire
firewire: core: extend card->lock in fw_core_handle_bus_reset
2022-05-12 12:17:09 +02:00
firmware
efi: capsule-loader: Fix use-after-free in efi_capsule_write
2022-09-15 12:23:51 +02:00
fmc
…
fpga
fpga: altera-pr-ip: fix unsigned comparison with less than zero
2022-08-25 11:11:21 +02:00
fsi
…
gpio
gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
2022-09-28 10:56:48 +02:00
gpu
drm/meson: Correct OSD1 global alpha value
2022-09-28 10:56:48 +02:00
hid
HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
2022-09-20 11:51:30 +02:00
hsi
HSI: core: Fix return freed object in hsi_new_client
2022-01-27 09:00:54 +01:00
hv
random: remove unused irq_flags argument from add_interrupt_randomness()
2022-06-25 11:46:30 +02:00
hwmon
hwmon: (gpio-fan) Fix array out of bounds access
2022-09-15 12:23:50 +02:00
hwspinlock
…
hwtracing
intel_th: pci: Add Meteor Lake-P support
2022-08-25 11:11:29 +02:00
i2c
i2c: mux-gpmux: Add of_node_put() when breaking out of loop
2022-08-25 11:11:20 +02:00
ide
…
idle
…
iio
iio: light: isl29028: Fix the warning in isl29028_remove()
2022-08-25 11:11:12 +02:00
infiniband
RDMA/rxe: Fix error unwind in rxe_create_qp()
2022-08-25 11:11:23 +02:00
input
Input: rk805-pwrkey - fix module autoloading
2022-09-15 12:23:50 +02:00
iommu
iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
2022-08-25 11:11:25 +02:00
ipack
ipack: ipoctal: fix module reference leak
2021-10-06 15:05:09 +02:00
irqchip
irqchip/tegra: Fix overflow implicit truncation warnings
2022-08-25 11:11:35 +02:00
isdn
mISDN: change function names to avoid conflicts
2022-01-11 13:57:38 +01:00
leds
…
lightnvm
lightnvm: disable the subsystem
2022-05-12 12:17:04 +02:00
macintosh
macintosh/adb: fix oob read in do_adb_query() function
2022-08-25 11:11:10 +02:00
mailbox
mailbox: forward the hrtimer if not queued and under a lock
2022-06-14 16:53:51 +02:00
mcb
mcb: fix error handling in mcb_alloc_bus()
2021-10-06 15:05:05 +02:00
md
md: call __md_stop_writes in md_stop
2022-09-05 10:25:05 +02:00
media
media: pvrusb2: fix memory leak in pvr_probe
2022-09-05 10:25:06 +02:00
memory
memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
2022-04-20 09:08:31 +02:00
memstick
memstick/ms_block: Fix a memory leak
2022-08-25 11:11:21 +02:00
message
…
mfd
mfd: t7l66xb: Drop platform disable callback
2022-08-25 11:11:25 +02:00
misc
cxl: Fix a memory leak in an error handling path
2022-08-25 11:11:36 +02:00
mmc
mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
2022-08-25 11:11:22 +02:00
mtd
mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
2022-08-25 11:11:21 +02:00
mux
…
net
net: usb: qmi_wwan: add Quectel RM520N
2022-09-28 10:56:49 +02:00
nfc
NFC: nxp-nci: don't print header length mismatch on i2c error
2022-07-21 20:42:46 +02:00
ntb
…
nubus
…
nvdimm
nvdimm: Fix badblocks clear off-by-one error
2022-07-07 17:31:16 +02:00
nvme
nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
2022-06-14 16:53:45 +02:00
nvmem
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2021-10-20 10:42:04 +02:00
of
of: fdt: fix off-by-one error in unflatten_dt_nodes()
2022-09-28 10:56:48 +02:00
oprofile
…
parisc
parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
2022-09-28 10:56:48 +02:00
parport
parport: remove non-zero check on count
2021-09-22 11:45:31 +02:00
pci
PCI: Add ACS quirk for Broadcom BCM5750x NICs
2022-08-25 11:11:35 +02:00
pcmcia
pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
2022-06-14 16:53:55 +02:00
perf
perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
2022-04-20 09:08:30 +02:00
phy
phy: qcom-qmp: fix reset-controller leak on probe errors
2022-06-14 16:53:55 +02:00
pinctrl
pinctrl: amd: Don't save/restore interrupt status and wake status bits
2022-09-05 10:25:02 +02:00
platform
platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
2022-09-20 11:51:31 +02:00
pnp
…
power
power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
2022-07-29 17:06:49 +02:00
powercap
…
pps
…
ps3
…
ptp
ptp: replace snprintf with sysfs_emit
2022-04-20 09:08:26 +02:00
pwm
pwm: lp3943: Fix duty calculation in case period was clamped
2022-06-14 16:53:56 +02:00
rapidio
…
ras
…
regulator
regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
2022-09-28 10:56:48 +02:00
remoteproc
remoteproc: qcom: wcnss: Fix handling of IRQs
2022-08-25 11:11:24 +02:00
reset
…
rpmsg
rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
2022-06-14 16:53:56 +02:00
rtc
rtc: mt6397: check return value after calling platform_get_resource()
2022-06-14 16:53:56 +02:00
s390
scsi: zfcp: Fix missing auto port scan and thus missing target ports
2022-08-25 11:11:27 +02:00
sbus
…
scsi
scsi: mpt3sas: Fix use-after-free warning
2022-09-15 12:23:52 +02:00
sfi
…
sh
maple: fix wrong return value of maple_bus_init().
2021-11-26 11:40:39 +01:00
sn
…
soc
soc: fsl: guts: machine variable might be unset
2022-08-25 11:11:15 +02:00
spi
spi: img-spfi: Fix pm_runtime_get_sync() error checking
2022-06-14 16:53:48 +02:00
spmi
…
ssb
…
staging
staging: rtl8712: fix use after free bugs
2022-09-15 12:23:50 +02:00
target
scsi: target: tcmu: Fix possible page UAF
2022-04-20 09:08:32 +02:00
tc
…
tee
tee: handle lookup of shm with reference count 0
2022-01-05 12:33:48 +01:00
thermal
thermal: int340x: Increase bitmap size
2022-04-20 09:08:12 +02:00
thunderbolt
thunderbolt: Use the actual buffer in tb_async_error()
2022-09-15 12:23:50 +02:00
tty
vt: Clear selection before changing the font
2022-09-15 12:23:50 +02:00
uio
…
usb
USB: serial: ch341: fix disabled rx timer on older devices
2022-09-15 12:23:52 +02:00
uwb
…
vfio
vfio: Clear the caps->buf to NULL after free
2022-08-25 11:11:36 +02:00
vhost
vringh: Fix loop descriptors check in the indirect cases
2022-06-14 16:54:01 +02:00
video
video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
2022-09-28 10:56:49 +02:00
virt
…
virtio
virtio_mmio: Restore guest page size on resume
2022-07-21 20:42:46 +02:00
vlynq
…
vme
…
w1
w1: w1_therm: fixes w1_seq for ds28ea00 sensors
2022-04-20 09:08:28 +02:00
watchdog
ar7: fix kernel builds for compiler test
2021-11-26 11:40:35 +01:00
xen
xen/xenbus: fix return type in xenbus_file_read()
2022-08-25 11:11:33 +02:00
zorro
…
Kconfig
…
Makefile
…