Salva Peiró 084b6e7765 staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl() ...

The function c4_ioctl() writes data from user in ifr->ifr_data
to the kernel struct data arg, without any iolen bounds checking.
This can lead to a arbitrary write outside of the struct data arg.
Corrected by adding bounds-checking of iolen before the copy_from_user().

Signed-off-by: Salva Peiró <speiro@ai2.upv.es>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-03-04 16:20:01 -08:00

..

android

staging: binder: Fix death notifications

2014-02-21 12:30:54 -08:00

bcm

netdevice: add queue selection fallback handler for ndo_select_queue

2014-02-17 00:36:34 -05:00

ced1401

…

comedi

staging: comedi: usbduxsigma: fix unaligned dereferences

2014-02-07 11:08:46 -08:00

cptm1217

…

crystalhd

…

cxt1e1

staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl()

2014-03-04 16:20:01 -08:00

dgap

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2014-01-25 11:17:34 -08:00

dgnc

…

dgrp

Revert "Staging: dgrp: Refactor the function dgrp_receive() in drrp_net_ops.c"

2014-02-07 09:16:38 -08:00

echo

…

et131x

…

frontier

…

ft1000

…

fwserial

…

gdm72xx

staging: gdm72xx: fix leaks at failure path in gdm_usb_probe()

2014-02-07 09:19:30 -08:00

gdm724x

…

goldfish

…

iio

staging:iio:adc:MXS:LRADC: fix touchscreen statemachine

2014-02-24 21:55:50 +00:00

imx-drm

staging: imx-drm: Fix build error

2014-02-05 12:02:18 -08:00

keucr

…

line6

…

lustre

staging: lustre: fix quotactl permission denied (LU-4530)

2014-02-07 09:53:12 -08:00

media

[media] go7007-loader: fix usb_dev leak

2014-02-04 06:28:00 -02:00

mt29f_spinand

…

netlogic

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2014-02-18 15:52:43 -08:00

nvec

Merge tag 'cleanup-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2014-01-23 18:36:55 -08:00

octeon

…

octeon-usb

staging: octeon-usb: Probe via device tree populated platform device.

2014-02-07 09:11:28 -08:00

olpc_dcon

…

ozwpan

Staging: ozwpan: Fix null dereference

2014-02-07 09:15:35 -08:00

panel

…

phison

…

quickstart

…

rtl8187se

…

rtl8188eu

staging: r8188eu: Add new device ID

2014-02-24 17:02:31 -08:00

rtl8192e

…

rtl8192u

…

rtl8712

…

rtl8821ae

staging/rtl8821ae: fix build, depends on MAC80211

2014-02-11 15:57:40 -08:00

rts5139

…

rts5208

…

sb105x

…

sbe-2t3e3

…

sep

…

serqt_usb2

…

silicom

…

slicoss

…

sm7xxfb

…

speakup

…

ste_rmi4

…

tidspbridge

…

usbip

usbip/userspace/libsrc/names.c: memory leak

2014-02-07 11:08:46 -08:00

vme

…

vt6655

…

vt6656

…

winbond

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2014-01-25 11:17:34 -08:00

wlags49_h2

wlags49_h2: Fix overflow in wireless_set_essid()

2014-02-07 11:10:08 -08:00

wlags49_h25

…

wlan-ng

…

xgifb

…

xillybus

…

Kconfig

Merge tag 'staging-3.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2014-02-01 10:29:59 -08:00

Makefile

Merge tag 'staging-3.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2014-02-01 10:29:59 -08:00

staging.c

…