Markus Armbruster 7e62255a4b ccid: Fix buffer overrun in handling of VSC_ATR message
ATR size exceeding the limit is diagnosed, but then we merrily use it
anyway, overrunning card->atr[].

The message is read from a character device.  Obvious security
implications unless the other end of the character device is trusted.

Spotted by Coverity.  CVE-2011-4111.

Signed-off-by: Markus Armbruster <armbru@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
2011-11-28 16:20:53 -06:00
..
2010-06-13 19:00:50 +01:00
2011-07-23 11:26:12 -05:00
2011-04-10 14:00:14 +02:00
2011-09-23 13:42:33 -05:00
2011-04-22 14:41:40 -05:00
2010-05-15 17:36:13 +00:00
2011-07-23 11:26:12 -05:00
2011-09-04 17:46:50 +03:00
2011-08-22 10:20:10 -05:00
2011-09-04 17:46:50 +03:00
2011-10-26 14:14:19 +01:00
2011-08-22 10:17:44 -05:00
2011-07-24 14:48:57 +00:00
2009-11-22 21:27:40 +00:00
2011-07-23 11:26:12 -05:00
2009-11-09 08:43:03 -06:00
2011-09-23 10:55:33 -05:00
2011-10-17 15:59:18 +02:00
2010-12-11 15:24:25 +00:00
2011-10-09 19:04:16 +04:00
2011-10-06 09:48:07 +02:00
2010-02-07 19:28:32 +00:00
2011-10-17 15:59:18 +02:00
2011-07-23 11:26:12 -05:00
2011-09-04 17:46:51 +03:00
2011-11-01 16:52:07 -05:00
2010-12-11 15:24:25 +00:00
2010-04-18 08:55:12 +00:00
2011-11-01 16:52:07 -05:00
2011-08-08 10:22:29 -05:00
2011-10-28 19:25:51 +02:00
2009-10-01 16:12:16 -05:00
2011-10-21 17:34:13 +02:00
2011-10-21 17:34:13 +02:00
2009-10-01 16:12:16 -05:00
2011-01-24 20:54:34 +00:00
2011-10-11 15:57:10 +02:00
2009-09-10 19:48:00 +04:00
2011-09-10 14:49:51 +00:00
2011-09-25 14:58:36 +03:00
2011-10-16 11:11:55 +00:00
2011-08-08 10:22:29 -05:00
2011-11-02 07:51:58 -05:00
2011-08-22 14:37:03 -05:00
2011-10-16 11:10:48 +00:00
2010-10-20 12:06:43 +02:00
2011-09-23 11:51:05 -05:00
2011-09-23 11:51:05 -05:00
2011-10-16 11:10:48 +00:00
2011-09-15 16:39:32 -03:00
2011-11-01 16:52:09 -05:00
2011-09-04 17:46:51 +03:00
2011-03-07 13:42:36 +01:00
2011-03-07 13:42:36 +01:00
2011-10-23 14:08:30 +00:00
2011-10-21 18:14:29 +02:00
2011-10-21 18:14:29 +02:00
2011-04-22 14:41:43 -05:00
2011-02-11 23:31:17 +01:00
2011-09-04 17:46:51 +03:00
2009-10-01 16:12:16 -05:00
2011-10-03 12:44:22 +02:00
2011-09-10 16:50:46 +00:00
2011-09-10 16:50:46 +00:00
2011-08-22 10:20:10 -05:00
2011-07-12 20:00:28 +00:00
2010-10-19 14:09:06 +02:00
2011-08-08 10:22:30 -05:00
2011-11-14 03:19:18 +01:00
2011-08-08 10:22:29 -05:00
2011-09-23 09:44:38 +00:00
2010-02-07 08:05:03 +00:00
2011-09-23 09:54:56 +00:00
2011-09-23 09:44:38 +00:00
2011-11-14 03:22:30 +01:00
2011-10-10 15:29:28 +02:00
2011-10-21 17:34:13 +02:00
2011-10-23 14:05:46 +00:00
2011-09-21 14:32:20 +02:00
2011-10-27 11:48:47 -02:00
2011-10-27 11:48:47 -02:00
2011-08-22 10:22:03 -05:00
2011-08-22 10:22:03 -05:00
2010-11-22 10:00:06 +02:00
2011-08-24 15:52:54 +03:00
2011-09-25 14:58:37 +03:00
2010-08-24 15:22:24 +00:00
2011-11-01 16:52:09 -05:00
2011-11-01 16:52:09 -05:00
2011-11-01 16:52:09 -05:00
2011-07-23 11:26:12 -05:00
2011-07-23 11:26:12 -05:00
2011-07-23 11:26:12 -05:00
2011-07-23 11:26:12 -05:00
2011-07-23 11:26:12 -05:00
2011-10-06 09:48:09 +02:00
2011-08-22 10:47:42 -05:00
2011-10-06 09:48:09 +02:00
2011-10-17 15:59:16 +02:00
2011-10-30 20:03:26 +01:00
2011-10-06 09:48:09 +02:00
2011-10-06 09:47:52 +02:00
2011-11-01 16:52:05 -05:00
2011-02-25 12:13:38 +01:00
2011-07-23 11:26:12 -05:00
2011-07-23 11:26:12 -05:00
2011-10-17 15:59:17 +02:00
2009-10-01 16:12:16 -05:00
2009-10-01 16:12:16 -05:00
2011-10-16 11:11:51 +00:00
2011-11-10 12:29:50 +00:00
2011-10-28 19:25:51 +02:00
2011-09-07 09:20:09 +02:00
2011-11-07 10:57:37 -06:00
2011-11-01 12:11:53 +01:00
2011-10-17 15:59:17 +02:00
2011-08-22 10:20:10 -05:00
2010-12-11 15:24:25 +00:00
2011-11-22 10:33:30 +01:00
2011-11-18 13:57:16 +01:00
2009-10-01 16:12:16 -05:00
2011-06-07 13:52:30 -05:00
2009-10-01 16:12:16 -05:00
2011-10-17 15:59:18 +02:00
2011-07-23 11:26:12 -05:00
2011-11-01 16:52:05 -05:00
2011-10-28 19:25:51 +02:00
2011-10-31 04:53:01 +01:00
2009-10-01 16:12:16 -05:00
2011-10-17 15:59:18 +02:00
2011-07-23 11:26:12 -05:00
2011-07-23 11:26:12 -05:00
2011-07-23 11:26:12 -05:00
2011-09-04 17:46:50 +03:00
2011-10-17 15:59:18 +02:00
2011-10-17 15:59:18 +02:00
2011-10-17 15:59:18 +02:00
2011-10-17 15:59:18 +02:00
2011-04-22 14:41:40 -05:00
2011-04-22 14:41:40 -05:00
2011-10-17 15:59:18 +02:00
2011-11-01 06:23:48 +00:00
2011-10-17 15:59:18 +02:00
2011-10-17 15:59:18 +02:00
2011-10-17 15:59:18 +02:00
2011-09-07 09:58:27 +02:00
2011-09-07 09:58:26 +02:00
2011-09-07 09:58:26 +02:00
2011-11-23 16:24:06 +01:00
2011-11-23 16:24:05 +01:00
2011-08-04 15:51:22 +02:00
2011-09-07 09:58:27 +02:00
2010-04-04 21:18:26 +01:00
2011-08-04 15:51:22 +02:00
2011-10-13 12:58:51 +02:00
2011-10-13 12:58:51 +02:00
2011-10-27 11:48:47 -02:00
2011-10-12 19:11:23 +05:30
2011-03-22 07:44:15 +01:00
2011-09-21 10:49:16 +01:00
2011-07-26 06:43:11 +02:00
2011-04-08 11:32:21 +02:00
2010-10-20 12:06:50 +02:00