linux/drivers/staging
Salva Peiró 084b6e7765 staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl()
The function c4_ioctl() writes data from user in ifr->ifr_data
to the kernel struct data arg, without any iolen bounds checking.
This can lead to a arbitrary write outside of the struct data arg.
Corrected by adding bounds-checking of iolen before the copy_from_user().

Signed-off-by: Salva Peiró <speiro@ai2.upv.es>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2014-03-04 16:20:01 -08:00
..
android staging: binder: Fix death notifications 2014-02-21 12:30:54 -08:00
bcm netdevice: add queue selection fallback handler for ndo_select_queue 2014-02-17 00:36:34 -05:00
ced1401
comedi staging: comedi: usbduxsigma: fix unaligned dereferences 2014-02-07 11:08:46 -08:00
cptm1217
crystalhd
cxt1e1 staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl() 2014-03-04 16:20:01 -08:00
dgap
dgnc
dgrp Revert "Staging: dgrp: Refactor the function dgrp_receive() in drrp_net_ops.c" 2014-02-07 09:16:38 -08:00
echo
et131x
frontier
ft1000
fwserial
gdm72xx staging: gdm72xx: fix leaks at failure path in gdm_usb_probe() 2014-02-07 09:19:30 -08:00
gdm724x
goldfish
iio staging:iio:adc:MXS:LRADC: fix touchscreen statemachine 2014-02-24 21:55:50 +00:00
imx-drm staging: imx-drm: Fix build error 2014-02-05 12:02:18 -08:00
keucr
line6
lustre staging: lustre: fix quotactl permission denied (LU-4530) 2014-02-07 09:53:12 -08:00
media [media] go7007-loader: fix usb_dev leak 2014-02-04 06:28:00 -02:00
mt29f_spinand
netlogic Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2014-02-18 15:52:43 -08:00
nvec
octeon
octeon-usb staging: octeon-usb: Probe via device tree populated platform device. 2014-02-07 09:11:28 -08:00
olpc_dcon
ozwpan Staging: ozwpan: Fix null dereference 2014-02-07 09:15:35 -08:00
panel
phison
quickstart
rtl8187se
rtl8188eu staging: r8188eu: Add new device ID 2014-02-24 17:02:31 -08:00
rtl8192e
rtl8192u
rtl8712
rtl8821ae staging/rtl8821ae: fix build, depends on MAC80211 2014-02-11 15:57:40 -08:00
rts5139
rts5208
sb105x
sbe-2t3e3
sep
serqt_usb2
silicom
slicoss
sm7xxfb
speakup
ste_rmi4
tidspbridge
usbip usbip/userspace/libsrc/names.c: memory leak 2014-02-07 11:08:46 -08:00
vme
vt6655
vt6656
winbond
wlags49_h2 wlags49_h2: Fix overflow in wireless_set_essid() 2014-02-07 11:10:08 -08:00
wlags49_h25
wlan-ng
xgifb
xillybus
Kconfig
Makefile
staging.c