Dan Carpenter
f13d6b305a
mISDN: make sure device name is NUL terminated ...
[ Upstream commit ccfb62f27beb295103e9392462b20a6ed807d0ea ]
The user can change the device_name with the IMSETDEVNAME ioctl, but we
need to ensure that the user's name is NUL terminated. Otherwise it
could result in a buffer overflow when we copy the name back to the user
with IMGETDEVINFO ioctl.
I also changed two strcpy() calls which handle the name to strscpy().
Hopefully, there aren't any other ways to create a too long name, but
it's nice to do this as a kernel hardening measure.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-06-22 08:17:22 +02:00
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
ARM: amba: Don't read past the end of sysfs "driver_override" buffer
2018-05-01 15:13:08 -07:00
binder: replace "%p" with "%pK"
2019-06-11 12:22:44 +02:00
libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
2019-06-22 08:17:18 +02:00
atm: he: fix sign-extension overflow on large shift
2019-02-27 10:06:59 +01:00
PM / core: Propagate dev->power.wakeup_path when no callbacks
2019-05-31 06:48:26 -07:00
virtio-blk: limit number of hw queues by nr_cpu_ids
2019-05-10 17:52:09 +02:00
Revert "Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV"
2018-11-27 16:09:40 +01:00
bus: arm-cci: remove unnecessary unreachable()
2018-12-05 19:42:41 +01:00
cdrom: Fix race condition in cdrom_sysctl_register
2019-04-05 22:29:12 +02:00
virtio_console: initialize vtermno value for ports
2019-05-31 06:48:29 -07:00
clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
2019-06-22 08:17:15 +02:00
clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
2019-03-23 13:19:46 +01:00
cpufreq: pmac32: fix possible object reference leak
2019-05-31 06:48:27 -07:00
cpuidle: big.LITTLE: fix refcount leak
2019-02-12 19:44:55 +01:00
crypto: vmx - ghash: do nosimd fallback manually
2019-06-11 12:22:35 +02:00
dmaengine: idma64: Use actual device for DMA transfers
2019-06-22 08:17:17 +02:00
dma-buf: remove redundant initialization of sg_table
2018-06-06 16:44:33 +02:00
EDAC, skx_edac: Fix logical channel intermediate decoding
2018-11-13 11:16:56 -08:00
extcon: arizona: Disable mic detect if running when driver is removed
2019-05-31 06:48:26 -07:00
firewire-ohci: work around oversized DMA reads on JMicron controllers
2018-05-30 07:50:18 +02:00
efi/libstub: Unify command line param parsing
2019-06-11 12:22:45 +02:00
gpio: gpio-omap: add check for off wake capable gpios
2019-06-22 08:17:17 +02:00
drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
2019-06-22 08:17:20 +02:00
HID: core: move Usage Page concatenation to Main item
2019-05-31 06:48:29 -07:00
Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels
2018-12-29 13:40:15 +01:00
hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
2019-05-31 06:48:24 -07:00
intel_th: msu: Fix single mode with IOMMU
2019-05-25 18:26:46 +02:00
i2c: acorn: fix i2c warning
2019-06-22 08:17:18 +02:00
ide: pmac: add of_node_put()
2018-12-21 14:11:37 +01:00
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data
2019-05-31 06:48:27 -07:00
RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
2019-05-31 06:48:23 -07:00
Input: synaptics-rmi4 - fix possible double free
2019-05-16 19:43:44 +02:00
iommu/vt-d: Set intel_iommu_gfx_mapped correctly
2019-06-22 08:17:14 +02:00
Revert "MIPS: perf: ath79: Fix perfcount IRQ assignment"
2019-06-11 12:22:48 +02:00
mISDN: make sure device name is NUL terminated
2019-06-22 08:17:22 +02:00
leds: pca9532: fix a potential NULL pointer dereference
2019-05-04 08:49:10 +02:00
macintosh/rack-meter: Convert cputime64_t use to u64
2018-10-20 09:51:32 +02:00
mailbox: xgene-slimpro: Fix potential NULL pointer dereference
2018-09-09 20:01:19 +02:00
bcache: fix stack corruption by PRECEDING_KEY()
2019-06-22 08:17:19 +02:00
media: v4l2-ioctl: clear fields in s_parm
2019-06-22 08:17:18 +02:00
memory: tegra: Fix integer overflow on tick value calculation
2019-05-25 18:26:49 +02:00
memstick: Prevent memstick host from getting runtime suspended during card detection
2019-02-12 19:44:55 +01:00
scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
2018-05-25 16:13:06 +02:00
mfd: twl6040: Fix device init errors for ACCCTL register
2019-06-22 08:17:13 +02:00
Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
2019-06-22 08:17:19 +02:00
mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
2019-05-31 06:48:25 -07:00
mtd: rawnand: gpmi: fix MX28 bus master lockup problem
2019-02-15 08:07:37 +01:00
be2net: Fix number of Rx queues used for flow hashing
2019-06-22 08:17:21 +02:00
spi: ST ST95HF NFC: declare missing of table
2019-05-16 19:43:43 +02:00
ntb_transport: Fix bug with max_mw_size parameter
2018-05-30 07:50:22 +02:00
libnvdimm/namespace: Fix label tracking error
2019-05-31 06:48:11 -07:00
nvme-loop: init nvmet_ctrl fatal_err_work when allocate
2019-05-08 07:19:08 +02:00
nvmem: core: fix read buffer in place
2019-06-22 08:17:15 +02:00
of: add helper to lookup compatible child node
2018-12-01 09:44:21 +01:00
parisc: Use implicit space register selection for loading the coherence index of I/O pdirs
2019-06-11 12:22:47 +02:00
parport_pc: fix find_superio io compare code, should use equal test.
2019-03-23 13:19:50 +01:00
PCI: xilinx: Check for __get_free_pages() failure
2019-06-22 08:17:17 +02:00
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
2018-11-13 11:16:46 -08:00
phy: tegra: remove redundant self assignment of 'map'
2019-02-27 10:07:03 +01:00
pinctrl: pistachio: fix leaked of_node references
2019-05-31 06:48:18 -07:00
platform/x86: intel_pmc_ipc: adding error handling
2019-06-22 08:17:16 +02:00
power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG
2019-05-25 18:26:56 +02:00
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl
2019-02-12 19:44:52 +01:00
pwm: Fix deadlock warning when removing PWM device
2019-06-22 08:17:17 +02:00
rapidio: fix a NULL pointer dereference when create_workqueue() fails
2019-06-22 08:17:11 +02:00
regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
2019-04-05 22:29:14 +02:00
reset: make device_reset_optional() really optional
2018-12-08 13:05:08 +01:00
rpmsg: smd: fix memory leak on channel create
2018-11-13 11:17:03 -08:00
rtc: pcf8523: don't return invalid date when battery is low
2019-06-22 08:17:21 +02:00
scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
2019-06-11 12:22:40 +02:00
drivers/sbus/char: add of_node_put()
2018-12-21 14:11:36 +01:00
scsi: bnx2fc: fix incorrect cast to u64 on shift operation
2019-06-22 08:17:20 +02:00
soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
2019-06-22 08:17:15 +02:00
dmaengine: idma64: Use actual device for DMA transfers
2019-06-22 08:17:17 +02:00
ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
2019-05-31 06:48:12 -07:00
Revert "staging: vc04_services: prevent integer overflow in create_pagelist()"
2019-06-22 08:17:22 +02:00
scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
2019-03-23 13:19:47 +01:00
TC: Set DMA masks for devices
2018-11-13 11:17:02 -08:00
drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
2019-06-22 08:17:13 +02:00
thunderbolt: Resume control channel after hibernation image is created
2018-04-24 09:34:12 +02:00
sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
2019-06-22 08:17:22 +02:00
uio: Fix an Oops on load
2018-11-27 16:09:41 +01:00
USB: serial: option: add Telit 0x1260 and 0x1261 compositions
2019-06-22 08:17:21 +02:00
uwb: hwa-rc: fix memory leak at probe
2018-10-03 17:01:42 -07:00
vfio/pci: use correct format characters
2019-05-08 07:19:10 +02:00
vhost: reject zero size iova range
2019-04-27 09:34:40 +02:00
video: imsttfb: fix potential NULL pointer dereferences
2019-06-22 08:17:17 +02:00
drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
2019-05-16 19:43:47 +02:00
virtio: Honour 'may_reduce_num' in vring_create_virtqueue
2019-04-17 08:36:47 +02:00
w1: fix the resume command API
2019-05-31 06:48:15 -07:00
watchdog: fix compile time error of pretimeout governors
2019-06-22 08:17:14 +02:00
fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock
2019-06-11 12:22:49 +02:00
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:50:44 +02:00
f13d6b305a