averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-08 18:13:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
ff83cd07bf64bb6cd778d6dbf83fd8a5589b6f84
linux-stable-mirror/drivers/rtc
T
History
Oleksij Rempel c72b7a474d rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read 
[ Upstream commit 3ab8c5ed4f ]

The nvmem interface supports variable buffer sizes, while the regmap
interface operates with fixed-size storage. If an nvmem client uses a
buffer size less than 4 bytes, regmap_read will write out of bounds
as it expects the buffer to point at an unsigned int.

Fix this by using an intermediary unsigned int to hold the value.

Fixes: fadfd092ee ("rtc: pcf85063: add nvram support")
Signed-off-by: Oleksij Rempel <o.rempel@pengutronix.de>
Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de>
Link: https://lore.kernel.org/r/20241218-rtc-pcf85063-stack-corruption-v1-1-12fd0ee0f046@pengutronix.de
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-02-21 13:49:21 +01:00
..
class.c
…
dev.c
…
interface.c
rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
2024-12-14 19:54:07 +01:00
Kconfig
rtc: mt6397: select IRQ_DOMAIN instead of depending on it
2024-03-26 18:20:58 -04:00
lib_test.c
rtc: test: Fix invalid format specifier.
2024-03-26 18:20:29 -04:00
lib.c
…
Makefile
…
nvmem.c
…
proc.c
…
rtc-88pm80x.c
…
rtc-88pm860x.c
…
rtc-ab8500.c
…
rtc-ab-b5ze-s3.c
…
rtc-ab-eoz9.c
rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
2024-12-14 19:54:09 +01:00
rtc-abx80x.c
rtc: abx80x: Fix WDT bit position of the status register
2024-12-14 19:54:07 +01:00
rtc-ac100.c
…
rtc-armada38x.c
…
rtc-as3722.c
…
rtc-asm9260.c
…
rtc-aspeed.c
…
rtc-at91rm9200.c
…
rtc-at91sam9.c
rtc: at91sam9: fix OF node leak in probe() error path
2024-10-17 15:22:01 +02:00
rtc-au1xxx.c
…
rtc-bd70528.c
…
rtc-bq32k.c
…
rtc-bq4802.c
…
rtc-brcmstb-waketimer.c
…
rtc-cadence.c
…
rtc-cmos.c
rtc: cmos: avoid taking rtc_lock for extended period of time
2024-12-14 19:54:49 +01:00
rtc-core.h
…
rtc-cpcap.c
…
rtc-cros-ec.c
…
rtc-da9052.c
…
rtc-da9055.c
…
rtc-da9063.c
…
rtc-davinci.c
…
rtc-digicolor.c
…
rtc-dm355evm.c
…
rtc-ds1216.c
…
rtc-ds1286.c
…
rtc-ds1302.c
…
rtc-ds1305.c
…
rtc-ds1307.c
…
rtc-ds1343.c
…
rtc-ds1347.c
…
rtc-ds1374.c
…
rtc-ds1390.c
…
rtc-ds1511.c
…
rtc-ds1553.c
…
rtc-ds1672.c
…
rtc-ds1685.c
…
rtc-ds1742.c
…
rtc-ds2404.c
…
rtc-ds3232.c
…
rtc-efi.c
…
rtc-em3027.c
…
rtc-ep93xx.c
…
rtc-fm3130.c
…
rtc-fsl-ftm-alarm.c
…
rtc-ftrtc010.c
…
rtc-gamecube.c
…
rtc-generic.c
…
rtc-goldfish.c
…
rtc-hid-sensor-time.c
…
rtc-hym8563.c
…
rtc-imx-sc.c
…
rtc-imxdi.c
…
rtc-isl1208.c
rtc: isl1208: Fix return value of nvmem callbacks
2024-08-03 08:49:42 +02:00
rtc-isl12022.c
…
rtc-isl12026.c
…
rtc-jz4740.c
…
rtc-lp8788.c
…
rtc-lpc24xx.c
…
rtc-lpc32xx.c
…
rtc-ls1x.c
…
rtc-m41t80.c
…
rtc-m41t93.c
…
rtc-m41t94.c
…
rtc-m48t35.c
…
rtc-m48t59.c
…
rtc-m48t86.c
…
rtc-max6900.c
…
rtc-max6902.c
…
rtc-max6916.c
…
rtc-max8907.c
…
rtc-max8925.c
…
rtc-max8997.c
…
rtc-max8998.c
…
rtc-max77686.c
…
rtc-mc13xxx.c
…
rtc-mc146818-lib.c
rtc: Extend timeout for waiting for UIP to clear to 1s
2024-01-31 16:17:01 -08:00
rtc-mcp795.c
…
rtc-meson-vrtc.c
…
rtc-meson.c
…
rtc-moxart.c
…
rtc-mpc5121.c
…
rtc-mpfs.c
…
rtc-msc313.c
…
rtc-msm6242.c
…
rtc-mt2712.c
…
rtc-mt6397.c
…
rtc-mt7622.c
…
rtc-mv.c
…
rtc-mxc_v2.c
…
rtc-mxc.c
…
rtc-nct3018y.c
rtc: nct3018y: fix possible NULL dereference
2024-08-29 17:30:39 +02:00
rtc-ntxec.c
…
rtc-omap.c
…
rtc-opal.c
…
rtc-optee.c
…
rtc-palmas.c
…
rtc-pcap.c
…
rtc-pcf2123.c
…
rtc-pcf2127.c
…
rtc-pcf8523.c
…
rtc-pcf8563.c
…
rtc-pcf8583.c
…
rtc-pcf50633.c
…
rtc-pcf85063.c
rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
2025-02-21 13:49:21 +01:00
rtc-pcf85363.c
rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
2023-11-20 11:52:13 +01:00
rtc-pic32.c
…
rtc-pl030.c
…
rtc-pl031.c
…
rtc-pm8xxx.c
…
rtc-ps3.c
…
rtc-pxa.c
…
rtc-r7301.c
…
rtc-r9701.c
…
rtc-rc5t583.c
…
rtc-rc5t619.c
…
rtc-rk808.c
…
rtc-rp5c01.c
…
rtc-rs5c313.c
…
rtc-rs5c348.c
…
rtc-rs5c372.c
…
rtc-rtd119x.c
…
rtc-rv3028.c
…
rtc-rv3029c2.c
…
rtc-rv3032.c
…
rtc-rv8803.c
…
rtc-rx4581.c
…
rtc-rx6110.c
…
rtc-rx8010.c
…
rtc-rx8025.c
…
rtc-rx8581.c
…
rtc-rzn1.c
rtc: rzn1: fix BCD to rtc_time conversion errors
2024-12-14 19:54:08 +01:00
rtc-s3c.c
…
rtc-s3c.h
…
rtc-s5m.c
…
rtc-s35390a.c
…
rtc-sa1100.c
…
rtc-sa1100.h
…
rtc-sc27xx.c
…
rtc-sd3078.c
…
rtc-sh.c
…
rtc-snvs.c
…
rtc-spear.c
…
rtc-st-lpc.c
rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
2024-12-14 19:54:07 +01:00
rtc-starfire.c
…
rtc-stk17ta8.c
…
rtc-stm32.c
…
rtc-stmp3xxx.c
…
rtc-sun4v.c
…
rtc-sun6i.c
…
rtc-sunplus.c
…
rtc-sunxi.c
…
rtc-tegra.c
…
rtc-test.c
…
rtc-ti-k3.c
…
rtc-tps6586x.c
…
rtc-tps65910.c
…
rtc-twl.c
…
rtc-v3020.c
…
rtc-vt8500.c
…
rtc-wilco-ec.c
…
rtc-wm831x.c
…
rtc-wm8350.c
…
rtc-x1205.c
…
rtc-xgene.c
…
rtc-zynqmp.c
…
sysfs.c
…