Salva Peiró 084b6e7765 staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl() ... The function c4_ioctl() writes data from user in ifr->ifr_data to the kernel struct data arg, without any iolen bounds checking. This can lead to a arbitrary write outside of the struct data arg. Corrected by adding bounds-checking of iolen before the copy_from_user(). Signed-off-by: Salva Peiró <speiro@ai2.upv.es> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-03-04 16:20:01 -08:00
..
android	staging: binder: Fix death notifications	2014-02-21 12:30:54 -08:00
bcm	netdevice: add queue selection fallback handler for ndo_select_queue	2014-02-17 00:36:34 -05:00
ced1401	…
comedi	staging: comedi: usbduxsigma: fix unaligned dereferences	2014-02-07 11:08:46 -08:00
cptm1217	…
crystalhd	…
cxt1e1	staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl()	2014-03-04 16:20:01 -08:00
dgap	…
dgnc	…
dgrp	Revert "Staging: dgrp: Refactor the function dgrp_receive() in drrp_net_ops.c"	2014-02-07 09:16:38 -08:00
echo	…
et131x	…
frontier	…
ft1000	…
fwserial	…
gdm72xx	staging: gdm72xx: fix leaks at failure path in gdm_usb_probe()	2014-02-07 09:19:30 -08:00
gdm724x	…
goldfish	…
iio	staging:iio:adc:MXS:LRADC: fix touchscreen statemachine	2014-02-24 21:55:50 +00:00
imx-drm	staging: imx-drm: Fix build error	2014-02-05 12:02:18 -08:00
keucr	…
line6	…
lustre	staging: lustre: fix quotactl permission denied (LU-4530)	2014-02-07 09:53:12 -08:00
media	[media] go7007-loader: fix usb_dev leak	2014-02-04 06:28:00 -02:00
mt29f_spinand	…
netlogic	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-02-18 15:52:43 -08:00
nvec	…
octeon	…
octeon-usb	staging: octeon-usb: Probe via device tree populated platform device.	2014-02-07 09:11:28 -08:00
olpc_dcon	…
ozwpan	Staging: ozwpan: Fix null dereference	2014-02-07 09:15:35 -08:00
panel	…
phison	…
quickstart	…
rtl8187se	…
rtl8188eu	staging: r8188eu: Add new device ID	2014-02-24 17:02:31 -08:00
rtl8192e	…
rtl8192u	…
rtl8712	…
rtl8821ae	staging/rtl8821ae: fix build, depends on MAC80211	2014-02-11 15:57:40 -08:00
rts5139	…
rts5208	…
sb105x	…
sbe-2t3e3	…
sep	…
serqt_usb2	…
silicom	…
slicoss	…
sm7xxfb	…
speakup	…
ste_rmi4	…
tidspbridge	…
usbip	usbip/userspace/libsrc/names.c: memory leak	2014-02-07 11:08:46 -08:00
vme	…
vt6655	…
vt6656	…
winbond	…
wlags49_h2	wlags49_h2: Fix overflow in wireless_set_essid()	2014-02-07 11:10:08 -08:00
wlags49_h25	…
wlan-ng	…
xgifb	…
xillybus	…
Kconfig	…
Makefile	…
staging.c	…