raspi/linux
1
0
Fork 1
mirror of https://github.com/raspberrypi/linux.git synced 2026-01-02 15:53:42 +00:00
Code Issues Projects Releases Wiki Activity
Files
cf2fbc56c478a34a68ff1fa6ad08460054dfd499
linux/drivers
History
Dan Carpenter 24c6fc6e74 i2c: ismt: prevent memory corruption in ismt_access() 
commit 690b2549b1 upstream.

The "data->block[0]" variable comes from the user and is a number
between 0-255.  It needs to be capped to prevent writing beyond the end
of dma_buffer[].

Fixes: 5e9a97b1f4 ("i2c: ismt: Adding support for I2C_SMBUS_BLOCK_PROC_CALL")
Reported-and-tested-by: Zheyu Ma <zheyuma97@gmail.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Mika Westerberg <mika.westerberg@linux.intel.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-06-06 08:43:37 +02:00
..
accessibility
speakup-dectlk: Restore pitch setting
2022-02-16 12:56:37 +01:00
acpi
ACPI: sysfs: Fix BERT error region memory mapping
2022-05-30 09:28:58 +02:00
amba
…
android
binder: avoid potential data leakage when copying txn
2022-01-27 11:04:09 +01:00
ata
ata: pata_marvell: Check the 'bmdma_addr' beforing reading
2022-04-27 14:38:58 +02:00
atm
atm: eni: Add check for dma_map_single
2022-03-23 09:16:41 +01:00
auxdisplay
auxdisplay: lcd2s: Use proper API to free the instance of charlcd object
2022-03-08 19:12:47 +01:00
base
firmware_loader: use kernel credentials when reading firmware
2022-05-18 10:26:53 +02:00
bcma
…
block
drbd: remove usage of list iterator variable after loop
2022-05-25 09:57:26 +02:00
bluetooth
Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
2022-04-08 14:23:41 +02:00
bus
bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
2022-05-09 09:14:37 +02:00
cdrom
…
char
random: check for signals after page of pool writes
2022-05-30 09:29:18 +02:00
clk
clk: at91: generated: consider range when calculating best rate
2022-05-25 09:57:32 +02:00
clocksource
clocksource: acpi_pm: fix return value of __setup handler
2022-04-08 14:23:09 +02:00
comedi
…
connector
…
counter
…
cpufreq
cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts
2022-05-09 09:14:37 +02:00
cpuidle
cpuidle: Fix kobject memory leaks in error paths
2021-11-18 19:16:29 +01:00
crypto
crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
2022-05-25 09:57:28 +02:00
cxl
cxl/regs: Fix size of CXL Capability Header Register
2022-04-08 14:23:30 +02:00
dax
dax: make sure inodes are flushed before destroy cache
2022-04-08 14:23:31 +02:00
dca
…
devfreq
…
dio
…
dma
dmaengine: imx-sdma: fix init of uart scripts
2022-04-27 14:38:58 +02:00
dma-buf
dma-buf: ensure unique directory name for dmabuf stats
2022-05-25 09:57:29 +02:00
edac
EDAC/synopsys: Read the error count from the correct register
2022-04-27 14:38:57 +02:00
eisa
…
extcon
…
firewire
firewire: core: extend card->lock in fw_core_handle_bus_reset
2022-05-12 12:30:05 +02:00
firmware
firmware: arm_scmi: Fix sorting of retrieved clock rates
2022-04-20 09:34:09 +02:00
fpga
…
fsi
fsi: Aspeed: Fix a potential double free
2022-04-08 14:23:44 +02:00
gnss
…
gpio
gpio: mvebu/pwm: Refuse requests with inverted polarity
2022-05-25 09:57:34 +02:00
gpu
drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
2022-05-25 09:57:28 +02:00
greybus
greybus: svc: fix an error handling bug in gb_svc_hello()
2022-04-08 14:22:50 +02:00
hid
HID: amd_sfh: Add support for sensor discovery
2022-05-30 09:28:58 +02:00
hsi
HSI: core: Fix return freed object in hsi_new_client
2022-01-27 11:04:31 +01:00
hv
random: remove unused irq_flags argument from add_interrupt_randomness()
2022-05-30 09:29:00 +02:00
hwmon
hwmon: (f71882fg) Fix negative temperature
2022-05-18 10:26:51 +02:00
hwspinlock
…
hwtracing
coresight: syscfg: Fix memleak on registration failure in cscfg_create_device
2022-04-08 14:22:50 +02:00
i2c
i2c: ismt: prevent memory corruption in ismt_access()
2022-06-06 08:43:37 +02:00
i3c
i3c: master: dw: check return of dw_i3c_master_get_free_pos()
2022-03-08 19:12:37 +01:00
idle
…
iio
iio:imu:bmi160: disable regulator in error path
2022-05-09 09:14:31 +02:00
infiniband
RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core()
2022-05-18 10:26:52 +02:00
input
Input: ili210x - fix reset timing
2022-05-25 09:57:36 +02:00
interconnect
interconnect: Restore sync state by ignoring ipa-virt in provider count
2022-05-18 10:26:53 +02:00
iommu
iommu: arm-smmu: disable large page mappings for Nvidia arm-smmu
2022-05-18 10:26:52 +02:00
ipack
…
irqchip
irqchip/gic, gic-v3: Prevent GSI to SGI translations
2022-04-13 20:59:28 +02:00
isdn
isdn: hfcpci: check the return value of dma_set_mask() in setup_hw()
2022-03-16 14:23:36 +01:00
leds
leds: lp55xx: initialise output direction from dts
2022-01-27 11:04:21 +01:00
macintosh
…
mailbox
mailbox: imx: fix wakeup failure from freeze mode
2022-04-08 14:24:10 +02:00
mcb
…
md
dm integrity: fix memory corruption when tag_size is less than digest size
2022-04-20 09:34:20 +02:00
media
media: rockchip/rga: do proper error checking in probe
2022-04-20 09:34:09 +02:00
memory
memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode
2022-05-09 09:14:34 +02:00
memstick
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2021-11-18 19:16:32 +01:00
message
…
mfd
mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
2022-04-08 14:23:43 +02:00
misc
eeprom: at25: Use DMA safe buffers
2022-05-09 09:14:44 +02:00
mmc
mmc: rtsx: add 74 Clocks in power on flow
2022-05-12 12:30:26 +02:00
most
most: fix control-message timeouts
2021-11-18 19:16:08 +01:00
mtd
mtd: rawnand: qcom: fix memory corruption that causes panic
2022-05-09 09:14:41 +02:00
mux
…
net
net: ftgmac100: Disable hardware checksum on AST2600
2022-06-06 08:43:36 +02:00
nfc
nfc: pn533: Fix buggy cleanup order
2022-06-06 08:43:36 +02:00
ntb
ntb: intel: fix port config status offset for SPR
2022-03-08 19:12:44 +01:00
nubus
…
nvdimm
nvdimm/region: Fix default alignment for small regions
2022-04-08 14:23:48 +02:00
nvme
nvme-multipath: fix hang when disk goes live over reconnect
2022-05-25 09:57:25 +02:00
nvmem
nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
2022-03-02 11:48:06 +01:00
of
of: net: move of_net under net/
2022-03-08 19:12:41 +01:00
opp
opp: Expose of-node's name in debugfs
2022-04-13 20:59:11 +02:00
parisc
parisc: Fix CPU affinity for Lasi, WAX and Dino chips
2022-04-13 20:59:14 +02:00
parport
…
pci
Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler"
2022-05-25 09:57:31 +02:00
pcmcia
pcmcia: fix setting of kthread task states
2022-01-27 11:04:02 +01:00
perf
arm_pmu: Validate single/group leader events
2022-04-27 14:39:00 +02:00
phy
phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe()
2022-05-09 09:14:34 +02:00
pinctrl
pinctrl: sunxi: fix f1c100s uart2 function
2022-06-06 08:43:36 +02:00
platform
platform/chrome: cros_ec_debugfs: detach log reader wq from devm
2022-05-25 09:57:26 +02:00
pnp
…
power
power: supply: axp288-charger: Set Vhold to 4.4V
2022-04-13 20:59:05 +02:00
powercap
…
pps
pps: clients: gpio: Propagate return value from pps_gpio_probe
2022-04-08 14:23:44 +02:00
ps3
…
ptp
ptp: replace snprintf with sysfs_emit
2022-04-13 20:59:01 +02:00
pwm
pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
2022-04-08 14:23:44 +02:00
rapidio
…
ras
…
regulator
regulator: wm8994: Add an off-on delay for WM8994 variant
2022-04-20 09:34:16 +02:00
remoteproc
remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region
2022-04-08 14:23:47 +02:00
reset
reset: tegra-bpmp: Restore Handle errors in BPMP response
2022-04-27 14:38:55 +02:00
rpmsg
rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
2022-02-01 17:27:07 +01:00
rtc
rtc: mc146818-lib: Fix the AltCentury for AMD platforms
2022-05-25 09:57:26 +02:00
s390
s390/lcs: fix variable dereferenced before check
2022-05-18 10:26:50 +02:00
sbus
…
scsi
scsi: qla2xxx: Fix missed DMA unmap for aborted commands
2022-05-25 09:57:35 +02:00
sh
maple: fix wrong return value of maple_bus_init().
2021-11-25 09:48:31 +01:00
siox
…
slimbus
slimbus: qcom: Fix IRQ check in qcom_slim_probe
2022-05-18 10:26:55 +02:00
soc
soc: qcom: aoss: Fix missing put_device call in qmp_get
2022-04-20 09:34:21 +02:00
soundwire
ASoC: Intel: sof_sdw: fix quirks for 2022 HP Spectre x360 13"
2022-04-08 14:24:02 +02:00
spi
spi: cadence-quadspi: fix write completion support
2022-05-01 17:22:27 +02:00
spmi
…
ssb
…
staging
staging: wfx: fix an error handling in wfx_init_common()
2022-04-13 20:59:11 +02:00
target
scsi: target: tcmu: Fix possible page UAF
2022-04-20 09:34:15 +02:00
tc
…
tee
optee: use driver internal tee_context for some rpc
2022-03-02 11:47:51 +01:00
thermal
thermal: int340x: Fix attr.show callback prototype
2022-05-09 09:14:42 +02:00
thunderbolt
thunderbolt: Runtime PM activate both ends of the device link
2022-01-27 11:04:36 +01:00
tty
serial: 8250_mtk: Fix register address for XON/XOFF character
2022-05-18 10:26:55 +02:00
uio
…
usb
usb: gadget: fix race when gadget driver register via ioctl
2022-05-25 09:57:21 +02:00
vdpa
vdpa: mlx5: prevent cvq work from hogging CPU
2022-04-13 20:59:15 +02:00
vfio
vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used
2022-04-20 09:34:13 +02:00
vhost
Fix double fget() in vhost_net_set_backend()
2022-05-25 09:57:27 +02:00
video
fbdev: Prevent possible use-after-free in fb_release()
2022-05-25 09:57:35 +02:00
virt
virt: acrn: fix a memory leak in acrn_dev_ioctl()
2022-04-08 14:23:50 +02:00
virtio
virtio: acknowledge all features before access
2022-03-16 14:23:43 +01:00
visorbus
…
vlynq
…
vme
…
w1
w1: w1_therm: fixes w1_seq for ds28ea00 sensors
2022-04-13 20:59:11 +02:00
watchdog
Watchdog: sp5100_tco: Enable Family 17h+ CPUs
2022-05-25 09:57:23 +02:00
xen
swiotlb: Support aligned swiotlb buffers
2022-04-08 14:24:17 +02:00
zorro
…
Kconfig
…
Makefile
virtio: always enter drivers/virtio/
2021-12-22 09:32:39 +01:00