Dan Carpenter 74661516da Input: ims-pcu - check record size in ims_pcu_flash_firmware() ...

commit a95ef0199e upstream.

The "len" variable comes from the firmware and we generally do
trust firmware, but it's always better to double check.  If the "len"
is too large it could result in memory corruption when we do
"memcpy(fragment->data, rec->data, len);"

Fixes: 628329d524 ("Input: add IMS Passenger Control Unit driver")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/131fd1ae92c828ee9f4fa2de03d8c210ae1f3524.1748463049.git.dan.carpenter@linaro.org
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-06-27 11:13:04 +01:00

..

88pm80x_onkey.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

88pm860x_onkey.c

…

88pm886-onkey.c

input: Add onkey driver for Marvell 88PM886 PMIC

2024-06-28 15:41:20 +01:00

ab8500-ponkey.c

…

ad714x-i2c.c

Input: drop explicit initialization of struct i2c_device_id::driver_data to 0

2024-05-13 15:43:19 -07:00

ad714x-spi.c

…

ad714x.c

Input: ad714x - use guard notation when acquiring mutex

2024-10-03 09:10:35 -07:00

ad714x.h

…

adxl34x-i2c.c

Input: adxl34x - switch to using managed resources

2024-06-11 11:17:44 -07:00

adxl34x-spi.c

Input: adxl34x - switch to using managed resources

2024-06-11 11:17:44 -07:00

adxl34x.c

Input: adxl34x - switch to using "guard" notation

2024-06-11 11:17:52 -07:00

adxl34x.h

Input: adxl34x - switch to using managed resources

2024-06-11 11:17:44 -07:00

apanel.c

Input: drop explicit initialization of struct i2c_device_id::driver_data to 0

2024-05-13 15:43:19 -07:00

ariel-pwrbutton.c

…

arizona-haptics.c

…

atc260x-onkey.c

…

ati_remote2.c

Input: ati_remote2 - use guard notation when acquiring mutex

2024-10-03 09:10:35 -07:00

atlas_btns.c

Input: atlas - drop owner assignment

2024-04-08 16:16:55 +02:00

atmel_captouch.c

Input: drop explicit initialization of struct i2c_device_id::driver_data to 0

2024-05-13 15:43:19 -07:00

axp20x-pek.c

Input: axp20x-pek - avoid needless newline removal

2023-09-30 09:35:31 -07:00

bma150.c

Input: drop explicit initialization of struct i2c_device_id::driver_data to 0

2024-05-13 15:43:19 -07:00

cm109.c

Input: cm109 - use guard notation when acquiring mutex and spinlock

2024-10-03 09:10:35 -07:00

cma3000_d0x_i2c.c

Input: drop explicit initialization of struct i2c_device_id::driver_data to 0

2024-05-13 15:43:19 -07:00

cma3000_d0x.c

Input: cma3000_d0x - use guard notation when acquiring mutex

2024-10-03 09:10:35 -07:00

cma3000_d0x.h

…

cobalt_btns.c

…

cpcap-pwrbutton.c

Input: cpcap-pwrbutton - replace GPLv2 boilerplate with SPDX

2023-07-05 14:50:00 -07:00

cs40l50-vibra.c

Input: cs40l50 - fix wrong usage of INIT_WORK()

2024-11-07 21:54:44 -08:00

da7280.c

Input: da7280 - use guard notation when acquiring mutex and spinlock

2024-10-03 09:10:35 -07:00

da9052_onkey.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

da9055_onkey.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

da9063_onkey.c

Input: da9063_onkey - avoid explicitly setting input's parent

2024-01-04 12:02:20 -08:00

drv260x.c

Input: drv260x - use guard notation when acquiring mutex

2024-10-03 09:10:36 -07:00

drv2665.c

Input: drv2665 - use guard notation when acquiring mutex

2024-10-03 09:10:36 -07:00

drv2667.c

Input: drv2667 - use guard notation when acquiring mutex

2024-10-03 09:10:36 -07:00

e3x0-button.c

…

gpio_decoder.c

…

gpio-beeper.c

…

gpio-vibra.c

Input: Explicitly include correct DT includes

2023-07-17 10:03:07 -07:00

hisi_powerkey.c

Input: hisi_powerkey - enable system-wakeup for s2idle

2025-05-10 22:26:33 -07:00

hp_sdc_rtc.c

…

ibm-panel.c

Input: ibm-panel - use guard notation when acquiring spinlock

2024-10-03 09:10:36 -07:00

ideapad_slidebar.c

Input: i8042 - Add support for platform filter contexts

2025-01-15 16:26:39 +02:00

ims-pcu.c

Input: ims-pcu - check record size in ims_pcu_flash_firmware()

2025-06-27 11:13:04 +01:00

iqs269a.c

Input: iqs269a - use cleanup facility for fwnodes

2024-10-03 09:10:37 -07:00

iqs626a.c

Input: iqs626a - use cleanup facility for fwnodes

2024-10-03 09:10:37 -07:00

iqs7222.c

Input: iqs7222 - preserve system status register

2025-03-09 23:12:07 -07:00

Kconfig

Input: max77693 - add max77705 haptic support

2025-02-20 16:37:47 +00:00

keyspan_remote.c

…

kxtj9.c

Input: kxtj9 - use guard notation when acquiring mutex/disabling irq

2024-10-03 09:10:36 -07:00

m68kspkr.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

Makefile

Input: add driver for the input part of qnap-mcu devices

2024-12-17 13:14:42 +00:00

max8925_onkey.c

…

max8997_haptic.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

max77650-onkey.c

…

max77693-haptic.c

Input: max77693 - add max77705 haptic support

2025-02-20 16:37:47 +00:00

mc13783-pwrbutton.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

mma8450.c

Input: mma8450 - add chip ID check in probe

2024-12-17 11:11:46 -08:00

nxp-bbnsm-pwrkey.c

Input: bbnsm_pwrkey - add remove hook

2024-12-16 09:34:16 -08:00

palmas-pwrbutton.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

pcap_keys.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

pcf8574_keypad.c

Input: drop explicit initialization of struct i2c_device_id::driver_data to 0

2024-05-13 15:43:19 -07:00

pcf50633-input.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

pcspkr.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

pm8xxx-vibrator.c

input: pm8xxx-vibrator: add new SPMI vibrator support

2024-04-17 15:27:12 -07:00

pm8941-pwrkey.c

Input: pm8941-pwrkey - fix dev_dbg() output in pm8941_pwrkey_irq()

2025-02-25 12:58:54 -08:00

pmic8xxx-pwrkey.c

Input: Explicitly include correct DT includes

2023-07-17 10:03:07 -07:00

powermate.c

Input: powermate - use guard notation when acquiring spinlock

2024-10-03 09:10:37 -07:00

pwm-beeper.c

Input: pwm-beeper - use guard notation when acquiring spinlock

2024-10-03 09:10:37 -07:00

pwm-vibra.c

pwm: Rename pwm_apply_state() to pwm_apply_might_sleep()

2023-12-20 16:07:04 +01:00

qnap-mcu-input.c

Input: add driver for the input part of qnap-mcu devices

2024-12-17 13:14:42 +00:00

rave-sp-pwrbutton.c

…

rb532_button.c

…

regulator-haptic.c

Input: Use str_enable_disable-like helpers

2025-01-14 13:41:41 -08:00

retu-pwrbutton.c

…

rk805-pwrkey.c

…

rotary_encoder.c

Input: rotary_encoder - use guard notation when acquiring mutex

2024-10-03 09:10:38 -07:00

rt5120-pwrkey.c

…

sc27xx-vibra.c

…

sgi_btns.c

Input: add missing MODULE_DESCRIPTION() macros

2024-06-09 14:38:48 -07:00

soc_button_array.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

sparcspkr.c

Input: sparcspkr - avoid unannotated fall-through

2025-04-18 18:38:46 -07:00

stpmic1_onkey.c

…

tps65218-pwrbutton.c

…

tps65219-pwrbutton.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

twl4030-pwrbutton.c

Input: twl4030-pwrbutton - fix kernel-doc warning

2024-07-11 09:57:58 -07:00

twl4030-vibra.c

Input: twl4030-vibra - use cleanup facility for device_node

2024-10-19 21:21:40 -07:00

twl6040-vibra.c

Input: twl6040-vibra - use cleanup facility for device_node

2024-10-19 21:21:39 -07:00

uinput.c

[tree-wide] finally take no_llseek out

2024-09-27 08:18:43 -07:00

wistron_btns.c

Merge tag 'input-for-v6.13-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2024-11-25 10:31:39 -08:00

wm831x-on.c

Input: switch back to struct platform_driver::remove()

2024-10-15 11:43:25 -07:00

xen-kbdfront.c

…

yealink.c

Input: correct typos in multiple comments across misc drivers

2024-09-30 08:00:16 -07:00

yealink.h

…