OpenE2K
/
linux
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
linux/drivers/staging
History
Salva Peiró 084b6e7765 staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl() 
The function c4_ioctl() writes data from user in ifr->ifr_data
to the kernel struct data arg, without any iolen bounds checking.
This can lead to a arbitrary write outside of the struct data arg.
Corrected by adding bounds-checking of iolen before the copy_from_user().

Signed-off-by: Salva Peiró <speiro@ai2.upv.es>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 		2014-03-04 16:20:01 -08:00
..
android staging: binder: Fix death notifications 2014-02-21 12:30:54 -08:00
bcm netdevice: add queue selection fallback handler for ndo_select_queue 2014-02-17 00:36:34 -05:00
ced1401
…
comedi staging: comedi: usbduxsigma: fix unaligned dereferences 2014-02-07 11:08:46 -08:00
cptm1217
…
crystalhd
…
cxt1e1 staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl() 2014-03-04 16:20:01 -08:00
dgap Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next 2014-01-25 11:17:34 -08:00
dgnc
…
dgrp Revert "Staging: dgrp: Refactor the function dgrp_receive() in drrp_net_ops.c" 2014-02-07 09:16:38 -08:00
echo
…
et131x
…
frontier
…
ft1000
…
fwserial
…
gdm72xx staging: gdm72xx: fix leaks at failure path in gdm_usb_probe() 2014-02-07 09:19:30 -08:00
gdm724x
…
goldfish
…
iio staging:iio:adc:MXS:LRADC: fix touchscreen statemachine 2014-02-24 21:55:50 +00:00
imx-drm staging: imx-drm: Fix build error 2014-02-05 12:02:18 -08:00
keucr
…
line6
…
lustre staging: lustre: fix quotactl permission denied (LU-4530) 2014-02-07 09:53:12 -08:00
media [media] go7007-loader: fix usb_dev leak 2014-02-04 06:28:00 -02:00
mt29f_spinand
…
netlogic Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2014-02-18 15:52:43 -08:00
nvec ARM: SoC cleanups for 3.14 2014-01-23 18:36:55 -08:00
octeon
…
octeon-usb staging: octeon-usb: Probe via device tree populated platform device. 2014-02-07 09:11:28 -08:00
olpc_dcon
…
ozwpan Staging: ozwpan: Fix null dereference 2014-02-07 09:15:35 -08:00
panel staging: panel: fix interruptible_sleep_on race 2014-01-09 10:41:44 -08:00
phison
…
quickstart
…
rtl8187se Staging: rtl8187se: ieee80211: ieee80211_softmac.c: mark symbols as static 2014-01-11 12:37:58 -08:00
rtl8188eu staging: r8188eu: Add new device ID 2014-02-24 17:02:31 -08:00
rtl8192e Staging rtl8192e: Correcting wrong usage of macro in r8192E_phy.c and removing corresponding warning in rtllib_debug.h 2014-01-09 10:32:18 -08:00
rtl8192u
…
rtl8712 staging: r8712u: Set device type to wlan 2014-01-09 10:35:25 -08:00
rtl8821ae staging/rtl8821ae: fix build, depends on MAC80211 2014-02-11 15:57:40 -08:00
rts5139 Staging: rts5139: rts51x_card: fixed style issues 2014-01-13 15:24:18 -08:00
rts5208
…
sb105x
…
sbe-2t3e3
…
sep
…
serqt_usb2 staging: serqt_usb2: don't use sleep_on 2014-01-09 10:41:44 -08:00
silicom Staging: silicom: fix sparse non static symbol warnings 2014-01-09 10:28:15 -08:00
slicoss
…
sm7xxfb
…
speakup
…
ste_rmi4
…
tidspbridge staging: tidspbridge: adjust error return code (bugfix) 2014-01-13 15:24:18 -08:00
usbip usbip/userspace/libsrc/names.c: memory leak 2014-02-07 11:08:46 -08:00
vme
…
vt6655 staging: vt6655: Fix memory leak in wpa_ioctl() 2014-01-13 15:19:41 -08:00
vt6656 staging: vt6656: sparse fixes: iwctl_giwgenie use memcpy. 2014-01-13 15:46:19 -08:00
winbond Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next 2014-01-25 11:17:34 -08:00
wlags49_h2 wlags49_h2: Fix overflow in wireless_set_essid() 2014-02-07 11:10:08 -08:00
wlags49_h25
…
wlan-ng staging: wlan-ng: fix leaks on failure paths in prism2sta_probe_usb() 2014-01-11 12:52:42 -08:00
xgifb
…
xillybus staging: xillybus: Open Firmware driver supporting coherent DMA 2014-01-09 10:42:36 -08:00
Kconfig Staging wireless driver for 3.14-rc1 2014-02-01 10:29:59 -08:00
Makefile Staging wireless driver for 3.14-rc1 2014-02-01 10:29:59 -08:00
staging.c
…