averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-04-03 12:05:13 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
704cd2f2074203306e75a2a086e514b1615fa2a1
linux-stable-mirror/drivers/input/misc
History
Dan Carpenter 5a8cd6ae83 Input: ims-pcu - check record size in ims_pcu_flash_firmware() 
commit a95ef0199e upstream.

The "len" variable comes from the firmware and we generally do
trust firmware, but it's always better to double check.  If the "len"
is too large it could result in memory corruption when we do
"memcpy(fragment->data, rec->data, len);"

Fixes: 628329d524 ("Input: add IMS Passenger Control Unit driver")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/131fd1ae92c828ee9f4fa2de03d8c210ae1f3524.1748463049.git.dan.carpenter@linaro.org
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-06-27 11:11:20 +01:00
..
88pm80x_onkey.c
Input: misc - use sizeof(*pointer) instead of sizeof(type)
2024-06-02 21:32:01 -07:00
88pm860x_onkey.c
…
88pm886-onkey.c
input: Add onkey driver for Marvell 88PM886 PMIC
2024-06-28 15:41:20 +01:00
ab8500-ponkey.c
…
ad714x-i2c.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
ad714x-spi.c
…
ad714x.c
…
ad714x.h
…
adxl34x-i2c.c
Input: adxl34x - switch to using managed resources
2024-06-11 11:17:44 -07:00
adxl34x-spi.c
Input: adxl34x - switch to using managed resources
2024-06-11 11:17:44 -07:00
adxl34x.c
Input: adxl34x - switch to using "guard" notation
2024-06-11 11:17:52 -07:00
adxl34x.h
Input: adxl34x - switch to using managed resources
2024-06-11 11:17:44 -07:00
apanel.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
ariel-pwrbutton.c
…
arizona-haptics.c
…
atc260x-onkey.c
…
ati_remote2.c
Input: ati-remote2 - use driver core to instantiate device attributes
2024-07-12 17:15:38 -07:00
atlas_btns.c
Input: atlas - drop owner assignment
2024-04-08 16:16:55 +02:00
atmel_captouch.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
axp20x-pek.c
Input: axp20x-pek - avoid needless newline removal
2023-09-30 09:35:31 -07:00
bma150.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
cm109.c
…
cma3000_d0x_i2c.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
cma3000_d0x.c
Input: misc - use sizeof(*pointer) instead of sizeof(type)
2024-06-02 21:32:01 -07:00
cma3000_d0x.h
…
cobalt_btns.c
…
cpcap-pwrbutton.c
…
cs40l50-vibra.c
Input: cs40l50 - fix wrong usage of INIT_WORK()
2024-12-05 14:03:02 +01:00
da7280.c
Merge tag 'v6.9' into next
2024-05-27 21:37:18 -07:00
da9052_onkey.c
Input: da9052_onkey - convert to platform remove callback returning void
2023-09-23 19:16:42 -07:00
da9055_onkey.c
Input: da9055_onkey - convert to platform remove callback returning void
2023-09-23 19:16:42 -07:00
da9063_onkey.c
Input: da9063_onkey - avoid explicitly setting input's parent
2024-01-04 12:02:20 -08:00
drv260x.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
drv2665.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
drv2667.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
e3x0-button.c
…
gpio_decoder.c
…
gpio-beeper.c
…
gpio-vibra.c
…
hisi_powerkey.c
…
hp_sdc_rtc.c
…
ibm-panel.c
…
ideapad_slidebar.c
Input: ideapad_slidebar - convert to platform remove callback returning void
2023-09-23 19:16:42 -07:00
ims-pcu.c
Input: ims-pcu - check record size in ims_pcu_flash_firmware()
2025-06-27 11:11:20 +01:00
iqs269a.c
Input: iqs269a - use device_for_each_child_node_scoped()
2024-07-15 16:45:52 -07:00
iqs626a.c
…
iqs7222.c
Input: iqs7222 - preserve system status register
2025-03-22 12:54:21 -07:00
Kconfig
Merge branch 'ib-mfd-input-regulator-6.11' into ibs-for-mfd-merged
2024-07-04 17:06:42 +01:00
keyspan_remote.c
…
kxtj9.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
m68kspkr.c
Input: m68kspkr - convert to platform remove callback returning void
2023-09-23 19:16:43 -07:00
Makefile
Merge branch 'ib-mfd-input-regulator-6.11' into ibs-for-mfd-merged
2024-07-04 17:06:42 +01:00
max8925_onkey.c
…
max8997_haptic.c
Input: misc - use sizeof(*pointer) instead of sizeof(type)
2024-06-02 21:32:01 -07:00
max77650-onkey.c
…
max77693-haptic.c
Input: max77693-haptic - add device-tree compatible strings
2023-12-12 21:42:36 -08:00
mc13783-pwrbutton.c
Input: mc13783-pwrbutton - convert to platform remove callback returning void
2023-09-23 19:16:43 -07:00
mma8450.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
nxp-bbnsm-pwrkey.c
Input: bbnsm_pwrkey - add remove hook
2025-02-17 10:05:13 +01:00
palmas-pwrbutton.c
Input: palmas-pwrbutton - convert to platform remove callback returning void
2023-09-23 19:16:43 -07:00
pcap_keys.c
Input: misc - use sizeof(*pointer) instead of sizeof(type)
2024-06-02 21:32:01 -07:00
pcf8574_keypad.c
Input: drop explicit initialization of struct i2c_device_id::driver_data to 0
2024-05-13 15:43:19 -07:00
pcf50633-input.c
Input: pcf50633-input - convert to platform remove callback returning void
2023-09-23 19:16:43 -07:00
pcspkr.c
Input: pcspkr - convert to platform remove callback returning void
2023-09-23 19:16:44 -07:00
pm8xxx-vibrator.c
input: pm8xxx-vibrator: add new SPMI vibrator support
2024-04-17 15:27:12 -07:00
pm8941-pwrkey.c
Input: pm8941-pwrkey - convert to platform remove callback returning void
2023-09-23 19:16:44 -07:00
pmic8xxx-pwrkey.c
…
powermate.c
Input: misc - use sizeof(*pointer) instead of sizeof(type)
2024-06-02 21:32:01 -07:00
pwm-beeper.c
pwm: Rename pwm_apply_state() to pwm_apply_might_sleep()
2023-12-20 16:07:04 +01:00
pwm-vibra.c
pwm: Rename pwm_apply_state() to pwm_apply_might_sleep()
2023-12-20 16:07:04 +01:00
rave-sp-pwrbutton.c
…
rb532_button.c
…
regulator-haptic.c
…
retu-pwrbutton.c
…
rk805-pwrkey.c
…
rotary_encoder.c
…
rt5120-pwrkey.c
…
sc27xx-vibra.c
…
sgi_btns.c
Input: add missing MODULE_DESCRIPTION() macros
2024-06-09 14:38:48 -07:00
soc_button_array.c
Input: add missing MODULE_DESCRIPTION() macros
2024-06-09 14:38:48 -07:00
sparcspkr.c
Input: sparcspkr - convert to platform remove callback returning void
2023-09-23 19:16:44 -07:00
stpmic1_onkey.c
…
tps65218-pwrbutton.c
…
tps65219-pwrbutton.c
…
twl4030-pwrbutton.c
Input: twl4030-pwrbutton - fix kernel-doc warning
2024-07-11 09:57:58 -07:00
twl4030-vibra.c
…
twl6040-vibra.c
…
uinput.c
[tree-wide] finally take no_llseek out
2024-09-27 08:18:43 -07:00
wistron_btns.c
Merge tag 'input-for-v6.12-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2024-09-24 12:42:35 -07:00
wm831x-on.c
Input: wm831x-on - convert to platform remove callback returning void
2023-09-23 19:16:44 -07:00
xen-kbdfront.c
…
yealink.c
Input: yealink - simplify locking in sysfs attribute handling
2024-07-12 17:15:45 -07:00
yealink.h
…