Jann Horn a0341fc198 ibmasm: don't write out of bounds in read handler ...

This read handler had a lot of custom logic and wrote outside the bounds of
the provided buffer. This could lead to kernel and userspace memory
corruption. Just use simple_read_from_buffer() with a stack buffer.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-07-07 09:59:35 +02:00

..

altera-stapl

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

c2port

kmemcheck: remove annotations

2017-11-15 18:21:04 -08:00

cardreader

for-4.17/block-20180402

2018-04-05 14:27:02 -07:00

cb710

treewide: Use struct_size() for devm_kmalloc() and friends

2018-06-06 11:15:43 -07:00

cxl

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

echo

misc: Remove Blackfin DSP echo support

2018-03-26 15:56:37 +02:00

eeprom

Merge branch 'i2c/for-4.18' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux

2018-06-14 16:21:46 +09:00

genwqe

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

ibmasm

ibmasm: don't write out of bounds in read handler

2018-07-07 09:59:35 +02:00

lis3lv02d

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

lkdtm

lkdtm: Add missing SPDX-License-Identifier line

2018-03-06 19:18:55 -08:00

mei

mei: discard messages from not connected client during power down.

2018-07-03 13:13:07 +02:00

mic

misc: mic: Release reference count and memory for VOP device

2018-03-15 18:12:01 +01:00

ocxl

ocxl: Fix missing unlock on error in afu_ioctl_enable_p9_wait()

2018-06-05 21:33:57 +10:00

sgi-gru

Char/Misc driver patches for 4.18-rc1

2018-06-05 16:20:22 -07:00

sgi-xp

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

ti-st

misc: ti-st: Replace GFP_ATOMIC with GFP_KERNEL in kim_probe

2018-04-23 13:31:27 +02:00

vmw_vmci

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

ad525x_dpot-i2c.c

…

ad525x_dpot-spi.c

…

ad525x_dpot.c

misc: ad525x_dpot: macros should not use a trailing semicolon

2017-12-18 16:02:26 +01:00

ad525x_dpot.h

misc: ad525x_dpot: Unnecessary space before function pointer arguments

2017-12-18 15:59:17 +01:00

apds990x.c

misc: apds990x: Missing a blank line after declarations.

2017-12-18 16:02:26 +01:00

apds9802als.c

misc: apds9802als: constify i2c_device_id

2017-08-28 16:55:49 +02:00

aspeed-lpc-ctrl.c

misc: aspeed-lpc-ctrl: Enable FWH and A2H bridge cycles

2018-03-15 18:20:51 +01:00

aspeed-lpc-snoop.c

drivers/misc: (aspeed-lpc-snoop): Add ast2400 to compat

2017-07-17 17:23:16 +02:00

atmel_tclib.c

…

atmel-ssc.c

misc: atmel-ssc: register as sound DAI if #sound-dai-cells is present

2016-12-15 12:13:31 +00:00

bh1770glc.c

misc: bh1770glc: constify attribute_group structures.

2017-08-28 16:55:48 +02:00

cs5535-mfgpt.c

…

ds1682.c

misc: ds1682: Ignore update-in-progress ETC reads

2018-01-09 17:03:57 +01:00

dummy-irq.c

Annotate hardware config module parameters in drivers/misc/

2017-04-20 12:02:32 +01:00

enclosure.c

misc: enclosure: Remove unnecessary error check

2017-12-07 18:45:31 +01:00

fsa9480.c

misc: fsa9480: Add blank line after declarations.

2018-01-09 17:03:57 +01:00

hmc6352.c

misc: hmc6352: constify i2c_device_id

2017-08-28 16:55:49 +02:00

hpilo.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

hpilo.h

misc: hpilo: Use SPDX-License-Identifier

2017-12-07 18:45:31 +01:00

ibmvmc.c

misc: IBM Virtual Management Channel Driver (VMC)

2018-05-14 16:35:42 +02:00

ibmvmc.h

misc: IBM Virtual Management Channel Driver (VMC)

2018-05-14 16:35:42 +02:00

ics932s401.c

misc: ics932s401: open brace should be on the previous line

2017-12-18 16:00:57 +01:00

ioc4.c

misc: ioc4: constify pci_device_id.

2017-08-28 16:55:48 +02:00

isl29003.c

misc: isl29003: Missing a blank line after declarations

2017-12-07 18:45:31 +01:00

isl29020.c

misc: isl29020: constify i2c_device_id

2017-08-28 16:55:49 +02:00

Kconfig

misc: IBM Virtual Management Channel Driver (VMC)

2018-05-14 16:35:42 +02:00

kgdbts.c

misc: kgdbts: Display progress of asynchronous tests

2018-01-25 08:40:17 -06:00

lattice-ecp3-config.c

…

Makefile

misc: IBM Virtual Management Channel Driver (VMC)

2018-05-14 16:35:42 +02:00

pch_phub.c

MISC: add const to bin_attribute structures

2017-08-28 16:55:48 +02:00

pci_endpoint_test.c

Merge branch 'lorenzo/pci/endpoint'

2018-06-06 16:10:30 -05:00

phantom.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

pti.c

drivers/misc/intel/pti: Rename the header file to free up the namespace

2017-12-17 12:52:34 +01:00

qcom-coincell.c

ARM: qcom: silence an uninitialized variable warning

2016-05-01 14:20:04 -07:00

spear13xx_pcie_gadget.c

…

sram-exec.c

misc: sram-exec: Use aligned fncpy instead of memcpy

2017-05-18 17:37:52 +02:00

sram.c

treewide: devm_kzalloc() -> devm_kcalloc()

2018-06-12 16:19:22 -07:00

sram.h

misc: sram: Integrate protect-exec reserved sram area type

2017-01-25 11:48:03 +01:00

tifm_7xx1.c

misc: tifm: Remove VLA

2018-04-23 13:31:27 +02:00

tifm_core.c

…

tsl2550.c

misc: tsl2550: Add OF device ID table

2017-04-08 18:22:59 +02:00

vexpress-syscfg.c

treewide: Use struct_size() for kmalloc()-family

2018-06-06 11:15:43 -07:00

vmw_balloon.c

vmw_balloon: fix inflation with batching

2018-07-03 12:58:23 +02:00