Dan Carpenter 2874211fcd vdpa/mlx5: Fix pointer math in mlx5_vdpa_get_config() ...

There is a pointer math bug here so if "offset" is non-zero then this
will copy memory from beyond the end of the array.

Fixes: 1a86b377aa ("vdpa/mlx5: Add VDPA driver for supported mlx5 devices")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20200808093241.GB115053@mwanda
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Acked-by: Eli Cohen <elic@nvidia.com>
Cc: Jason Wang <jasowang@redhat.com>; Parav Pandit <parav@mellanox.com>; virtualization@lists.linux-foundation.org; linux-kernel@vger.kernel.org; kernel-janitors@vger.kernel.org
Fixes: 1a86b377aa ("vdpa/mlx5: Add VDPA driver for supported mlx5 devices")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>

2020-08-10 09:01:21 -04:00

..

accessibility

…

acpi

…

amba

…

android

binder: Don't use mmput() from shrinker function.

2020-07-23 09:47:12 +02:00

ata

…

atm

atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent

2020-07-30 17:35:53 -07:00

auxdisplay

…

base

device property: Avoid NULL pointer dereference in device_get_next_child_node()

2020-07-23 17:04:28 +02:00

bcma

…

block

Merge tag 'char-misc-5.8-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc into master

2020-07-16 11:26:40 -07:00

bluetooth

…

bus

Merge tag 'timers-urgent-2020-07-25' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip into master

2020-07-25 13:27:12 -07:00

cdrom

…

char

random32: update the net random state on interrupt and activity

2020-07-29 10:35:37 -07:00

clk

Merge tag 'clk-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux into master

2020-07-15 19:00:12 -07:00

clocksource

Merge tag 'timers-urgent-2020-07-25' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip into master

2020-07-25 13:27:12 -07:00

connector

…

counter

…

cpufreq

cpufreq: intel_pstate: Fix active mode setting from command line

2020-07-13 17:55:57 +02:00

cpuidle

…

crypto

virtio_crypto: convert to LE accessors

2020-08-05 11:08:41 -04:00

dax

…

dca

…

devfreq

…

dio

…

dma

Merge tag 'dmaengine-fix-5.8-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine into master

2020-07-15 15:58:11 -07:00

dma-buf

dmabuf: use spinlock to access dmabuf->name

2020-07-10 15:39:29 +05:30

edac

…

eisa

…

extcon

…

firewire

…

firmware

firmware: Fix a reference count leak.

2020-07-29 13:13:50 -04:00

fpga

fpga: dfl: fix bug in port reset handshake

2020-07-13 22:11:17 -07:00

fsi

…

gnss

…

gpio

…

gpu

drm/virtio: convert to LE accessors

2020-08-05 11:08:41 -04:00

greybus

…

hid

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid into master

2020-07-17 09:43:13 -07:00

hsi

…

hv

…

hwmon

hwmon: (drivetemp) Avoid SCT usage on Toshiba DT01ACA family drives

2020-07-18 08:11:44 -07:00

hwspinlock

…

hwtracing

intel_th: Fix a NULL dereference when hub driver is not loaded

2020-07-10 15:12:48 +02:00

i2c

i2c: slave: add sanity check when unregistering

2020-07-28 18:37:17 +02:00

i3c

…

ide

…

idle

…

iio

…

infiniband

RDMA/core: Free DIM memory in error unwind

2020-07-30 11:03:33 -03:00

input

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2020-07-13 18:31:15 -07:00

interconnect

interconnect: msm8916: Fix buswidth of pcnoc_s nodes

2020-07-23 10:45:24 +02:00

iommu

virtio-iommu: convert to LE accessors

2020-08-05 11:08:41 -04:00

ipack

…

irqchip

…

isdn

…

leds

…

lightnvm

…

macintosh

…

mailbox

…

mcb

…

md

dm integrity: fix integrity recalculation that is improperly skipped

2020-07-23 14:39:37 -04:00

media

…

memory

…

memstick

…

message

…

mfd

irqdomain/treewide: Keep firmware node unconditionally allocated

2020-07-14 17:44:42 +02:00

misc

habanalabs: prevent possible out-of-bounds array access

2020-07-19 08:15:36 +03:00

mmc

mmc: sdhci-of-aspeed: Fix clock divider calculation

2020-07-13 12:17:34 +02:00

most

…

mtd

…

mux

…

net

Merge branch 'mlx5-next' of git://git.kernel.org/pub/scm/linux/kernel/git/mellanox/linux into HEAD

2020-08-05 18:32:05 -04:00

nfc

nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame

2020-07-20 18:31:33 -07:00

ntb

…

nubus

…

nvdimm

virtio_pmem: convert to LE accessors

2020-08-05 11:08:41 -04:00

nvme

nvme: add a Identify Namespace Identification Descriptor list quirk

2020-07-29 08:05:44 +02:00

nvmem

…

of

…

opp

opp: Increase parsed_static_opps in _of_add_opp_table_v1()

2020-07-16 08:50:54 +05:30

oprofile

…

parisc

…

parport

…

pci

Merge tag 'pci-v5.8-fixes-3' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci

2020-07-30 12:01:42 -07:00

pcmcia

…

perf

drivers/perf: Prevent forced unbinding of PMU drivers

2020-07-17 10:51:44 +01:00

phy

…

pinctrl

Merge tag 'pinctrl-v5.8-4' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl

2020-08-01 10:11:42 -07:00

platform

mlxbf-tmfifo: sparse tags for config access

2020-08-05 11:08:40 -04:00

pnp

…

power

…

powercap

…

pps

…

ps3

…

ptp

…

pwm

…

rapidio

…

ras

…

regulator

…

remoteproc

…

reset

…

rpmsg

…

rtc

…

s390

…

sbus

…

scsi

virtio_scsi: correct tags for config space fields

2020-08-05 11:08:40 -04:00

sfi

…

sh

…

siox

…

slimbus

…

soc

Merge tag 'imx-fixes-5.8-2' of git://git.kernel.org/pub/scm/linux/kernel/git/shawnguo/linux into arm/fixes

2020-07-16 22:08:07 +02:00

soundwire

…

spi

Merge tag 'spi-fix-v5.8-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi into master

2020-07-17 10:24:09 -07:00

spmi

…

ssb

…

staging

Merge tag 'staging-5.8-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging into master

2020-07-26 09:14:59 -07:00

target

…

tc

…

tee

…

thermal

Merge tag 'thermal-v5.8-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/thermal/linux into master

2020-07-16 11:08:54 -07:00

thunderbolt

…

tty

serial: exar: Fix GPIO configuration for Sealevel cards based on XR17V35X

2020-07-24 10:58:14 +02:00

uio

…

usb

usb: tegra: Fix allocation for the FPCI context

2020-07-23 13:21:01 +02:00

vdpa

vdpa/mlx5: Fix pointer math in mlx5_vdpa_get_config()

2020-08-10 09:01:21 -04:00

vfio

vfio/pci: fix racy on error and request eventfd ctx

2020-07-17 08:28:40 -06:00

vhost

vdpa: Modify get_vq_state() to return error code

2020-08-05 19:00:23 -04:00

video

fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.

2020-07-23 16:22:25 +02:00

virt

virt: vbox: Fix guest capabilities mask check

2020-07-10 13:40:19 +02:00

virtio

virtio_pci_modern: Fix the comment of virtio_pci_find_capability()

2020-08-05 11:08:42 -04:00

visorbus

…

vlynq

…

vme

…

w1

…

watchdog

…

xen

Merge tag 'for-linus-5.8b-rc5-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip

2020-07-11 11:16:46 -07:00

zorro

…

Kconfig

…

Makefile

…