Florian Fainelli
0101213f67
net: phy: micrel: Use strlcpy() for ethtool::get_strings
...
commit 55f53567afe5f0cd2fd9e006b174c08c31c466f8 upstream.
Our statistics strings are allocated at initialization without being
bound to a specific size, yet, we would copy ETH_GSTRING_LEN bytes using
memcpy() which would create out of bounds accesses, this was flagged by
KASAN. Replace this with strlcpy() to make sure we are bound the source
buffer size and we also always NUL-terminate strings.
Fixes: 2b2427d064 ("phy: micrel: Add ethtool statistics counters")
Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-05-20 08:15:37 +02:00
..
accessibility
acpi
Revert "ACPI / video: Add force_native quirk for HP Pavilion dv6"
2020-05-20 08:15:27 +02:00
amba
android
ANDROID: binder: synchronize_rcu() when using POLLFREE.
2019-10-07 18:53:19 +02:00
ata
libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set
2020-04-24 07:58:59 +02:00
atm
atm: eni: fix uninitialized variable warning
2020-02-05 13:05:41 +00:00
auxdisplay
base
driver core: platform: fix u32 greater or equal to zero comparison
2020-02-28 15:42:37 +01:00
bcma
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
2020-01-29 10:24:31 +01:00
block
virtio-blk: fix hw_queue stopped on arbitrary error
2020-03-20 09:07:43 +01:00
bluetooth
Bluetooth: btusb: fix PM leak in error case of setup
2020-01-12 11:24:16 +01:00
bus
bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
2020-04-24 07:58:46 +02:00
cdrom
cdrom: respect device capabilities during opening action
2020-01-04 13:41:02 +01:00
char
tpm/tpm_tis: Free IRQ if probing fails
2020-05-02 17:23:11 +02:00
clk
clk: tegra: Fix Tegra PMC clock out parents
2020-04-24 07:59:11 +02:00
clocksource
clocksource/drivers/exynos_mct: Fix error path in timer resources initialization
2020-01-29 10:24:17 +01:00
connector
cpufreq
cpufreq: powernv: Fix use-after-free
2020-04-24 07:58:59 +02:00
cpuidle
cpuidle: Do not unset the driver if it is there already
2019-12-21 10:42:04 +01:00
crypto
crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static
2020-05-02 17:22:59 +02:00
dax
dca
devfreq
PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency
2020-02-28 15:42:28 +01:00
dio
dma
dmaengine: mmp_tdma: Reset channel error on release
2020-05-20 08:15:35 +02:00
dma-buf
dma-buf: Fix memory leak in sync_file_merge()
2019-12-21 10:42:32 +01:00
edac
EDAC/ghes: Fix grain calculation
2020-01-04 13:39:51 +01:00
eisa
extcon
extcon: sm5502: Reset registers during initialization
2020-01-04 13:39:22 +01:00
firewire
net: add annotations on hh->hh_len lockless accesses
2020-01-12 11:24:19 +01:00
firmware
efi: Add a sanity check to efivar_store_raw()
2020-03-20 09:07:49 +01:00
fmc
fpga
gpio
Revert "gpio: set up initial state from .get_direction()"
2020-04-24 07:59:08 +02:00
gpu
drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
2020-05-20 08:15:35 +02:00
hid
HID: i2c-hid: add Trekstor Surfbook E11B to descriptor override
2020-03-20 09:07:57 +01:00
hsi
hv
hwmon
hwmon: (jc42) Fix name to have no illegal characters
2020-05-02 17:23:18 +02:00
hwspinlock
hwtracing
intel_th: Fix user-visible error codes
2020-04-02 17:20:25 +02:00
i2c
i2c: st: fix missing struct parameter description
2020-04-24 07:58:47 +02:00
ide
ide: serverworks: potential overflow in svwks_set_pio_mode()
2020-02-28 15:42:36 +01:00
idle
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
iio
iio:ad7797: Use correct attribute_group
2020-05-10 10:28:00 +02:00
infiniband
IB/mlx4: Test return value of calls to ib_get_cached_pkey
2020-05-20 08:15:36 +02:00
input
Input: i8042 - add Acer Aspire 5738z to nomux list
2020-04-24 07:58:59 +02:00
iommu
iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system
2020-05-05 19:14:40 +02:00
ipack
irqchip
irqchip/versatile-fpga: Apply clear-mask earlier
2020-04-24 07:58:53 +02:00
isdn
staging: gigaset: add endpoint-type sanity check
2019-12-21 10:41:50 +01:00
leds
leds: leds-lp5562 allow firmware files up to the maximum length
2019-10-05 12:30:17 +02:00
lguest
lightnvm
macintosh
macintosh/windfarm_smu_sat: Fix debug output
2019-11-28 18:28:30 +01:00
mailbox
mailbox: handle failed named mailbox channel request
2019-08-04 09:33:41 +02:00
mcb
md
dm verity fec: fix hash block number in verity_fec_decode
2020-05-05 19:14:38 +02:00
media
media: ti-vpe: cal: fix disable_irqs to only the intended target
2020-04-24 07:58:52 +02:00
memory
memory: tegra: Fix integer overflow on tick value calculation
2019-05-25 18:26:49 +02:00
memstick
memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
2019-10-29 09:15:25 +01:00
message
scsi: mptfusion: Fix double fetch bug in ioctl
2020-01-23 08:19:39 +01:00
mfd
mfd: dln2: Fix sanity checking for endpoints
2020-04-24 07:59:01 +02:00
misc
misc: echo: Remove unnecessary parentheses and simplify check for zero
2020-04-24 07:59:01 +02:00
mmc
mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2
2020-04-02 17:20:25 +02:00
mtd
mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
2020-05-02 17:23:15 +02:00
net
net: phy: micrel: Use strlcpy() for ethtool::get_strings
2020-05-20 08:15:37 +02:00
nfc
NFC: fdp: Fix a signedness bug in fdp_nci_send_patch()
2020-04-02 17:20:30 +02:00
ntb
ntb: intel: fix return value for ndev_vec_mask()
2019-11-28 18:28:52 +01:00
nubus
nvdimm
libnvdimm: Out of bounds read in __nd_ioctl()
2020-04-24 07:59:14 +02:00
nvme
nvme: retain split access workaround for capability reads
2020-01-29 10:24:33 +01:00
nvmem
nvmem: core: return error code instead of NULL from nvmem_device_get
2019-11-25 09:52:16 +01:00
of
of: unittest: kmemleak in of_unittest_platform_populate()
2020-04-24 07:59:10 +02:00
oprofile
parisc
parisc: Disable HP HSC-PCI Cards to prevent kernel crash
2019-10-05 12:30:31 +02:00
parport
parport: load lowlevel driver if ports not found
2020-01-04 13:39:55 +01:00
pci
PCI/ASPM: Allow re-enabling Clock PM
2020-05-02 17:23:07 +02:00
pcmcia
perf
drivers/perf: arm_pmu: Fix failure path in PM notifier
2019-08-06 18:29:41 +02:00
phy
phy: phy-twl4030-usb: fix denied runtime access
2019-11-25 09:52:50 +01:00
pinctrl
pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler
2020-05-20 08:15:35 +02:00
platform
MIPS: Loongson: Fix return value of loongson_hwmon_init
2020-01-29 10:24:35 +01:00
pnp
power
power: supply: bq27xxx_battery: Silence deferred-probe error
2020-04-24 07:59:11 +02:00
powercap
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
pps
drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
2019-08-04 09:33:45 +02:00
ps3
ptp
ptp: free ptp device pin descriptors properly
2020-05-20 08:15:33 +02:00
pwm
pwm: bcm2835: Dynamically allocate base
2020-05-02 17:23:07 +02:00
rapidio
drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
2020-01-29 10:24:18 +01:00
ras
regulator
regulator: rk808: Lower log level on optional GPIOs being not available
2020-02-28 15:42:23 +01:00
remoteproc
remoteproc: Fix wrong rvring index computation
2020-05-02 17:23:14 +02:00
reset
reset: Fix potential use-after-free in __of_reset_control_get()
2019-11-25 09:53:42 +01:00
rpmsg
rtc
rtc: pm8xxx: Fix issue in RTC write path
2020-04-24 07:59:09 +02:00
s390
s390/cio: avoid duplicated 'ADD' uevents
2020-05-02 17:23:06 +02:00
sbus
scsi
scsi: sg: add sg_remove_request in sg_write
2020-05-20 08:15:34 +02:00
sfi
sh
sn
soc
soc: qcom: smem: Use le32_to_cpu for comparison
2020-04-24 07:59:10 +02:00
spi
spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls
2020-05-20 08:15:34 +02:00
spmi
ssb
ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
2019-05-31 06:48:12 -07:00
staging
staging: vt6656: Power save stop wake_up_count wrap around.
2020-05-02 17:23:13 +02:00
target
scsi: target: fix PR IN / READ FULL STATUS for FC
2020-05-02 17:23:17 +02:00
tc
thermal
thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
2020-01-29 10:24:24 +01:00
thunderbolt
thunderbolt: Use 32-bit writes when writing ring producer/consumer
2019-11-06 12:18:14 +01:00
tty
tty: rocket, avoid OOB access
2020-05-02 17:23:12 +02:00
uio
uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol()
2020-02-28 15:42:20 +01:00
usb
USB: serial: garmin_gps: add sanity checking for data length
2020-05-20 08:15:27 +02:00
uwb
vfio
vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
2020-05-05 19:14:39 +02:00
vhost
vhost: vsock: kick send_pkt worker once device is started
2020-05-10 10:28:00 +02:00
video
fbdev: potential information leak in do_fb_ioctl()
2020-04-24 07:59:14 +02:00
virt
drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
2019-05-16 19:43:47 +02:00
virtio
virtio-balloon: fix managed page counts when migrating pages between zones
2019-12-21 10:41:57 +01:00
vlynq
vme
vme: bridges: reduce stack usage
2020-02-28 15:42:33 +01:00
w1
w1: fix the resume command API
2019-05-31 06:48:15 -07:00
watchdog
watchdog: reset last_hw_keepalive time at start
2020-05-02 17:23:02 +02:00
xen
xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
2020-05-02 17:23:17 +02:00
zorro
Kconfig
Makefile