redonkable/remarkable-linux
redonkable/remarkable-linux
1
0
Fork 0
Code Releases Activity
remarkable-linux/drivers/staging/cxt1e1
History
Salva Peiró 084b6e7765 staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl() 
The function c4_ioctl() writes data from user in ifr->ifr_data
to the kernel struct data arg, without any iolen bounds checking.
This can lead to a arbitrary write outside of the struct data arg.
Corrected by adding bounds-checking of iolen before the copy_from_user().

Signed-off-by: Salva Peiró <speiro@ai2.upv.es>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2014-03-04 16:20:01 -08:00
..
comet.c staging: cxt1e1: fix long lines warning 2013-11-10 08:05:15 -08:00
comet.h staging: cxt1e1: remove typedef comet_t 2013-11-10 08:05:15 -08:00
comet_tables.c Staging: cxt1e1: remove rcs keywords and log 2011-11-26 18:11:35 -08:00
comet_tables.h Staging: cxt1e1: remove rcs keywords and log 2011-11-26 18:11:35 -08:00
functions.c staging: cxt1e1: remove typedef comet_t 2013-11-10 08:05:15 -08:00
hwprobe.c staging: cxt1e1: hwprobe.c: Return negative error codes 2013-09-30 18:48:41 -07:00
Kconfig doc: fix broken references 2011-09-27 18:08:04 +02:00
libsbew.h Merge branch 'staging-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging 2012-01-09 12:18:17 -08:00
linux.c staging/cxt1e1/linux.c: Correct arbitrary memory write in c4_ioctl() 2014-03-04 16:20:01 -08:00
Makefile staging: cxt1e1: Remove #define SBE_INCLUDE_SYMBOLS 2013-08-12 15:20:25 -07:00
musycc.c staging: ctxt1e1: Fixed sparse warning related to static declaration 2013-11-10 12:19:16 -08:00
musycc.h staging: cxt1e1: musycc.h: fixes brace placement 2012-11-21 14:20:39 -08:00
ossiRelease.c Staging: cxt1e1: remove rcs keywords and log 2011-11-26 18:11:35 -08:00
pmc93x6_eeprom.c staging: cxt1e1: Remove #define SBE_INCLUDE_SYMBOLS 2013-08-12 15:20:25 -07:00
pmc93x6_eeprom.h Staging: cxt1e1: remove rcs keywords and log 2011-11-26 18:11:35 -08:00
pmcc4.h Staging/cxt1e1:Fixing foo * bar should be foo *bar 2013-05-22 15:28:30 -07:00
pmcc4_cpld.h Staging: cxt1e1: remove rcs keywords and log 2011-11-26 18:11:35 -08:00
pmcc4_defs.h Staging: cxt1e1: remove rcs keywords and log 2011-11-26 18:11:35 -08:00
pmcc4_drv.c staging: cxt1e1: remove typedef comet_t 2013-11-10 08:05:15 -08:00
pmcc4_ioctls.h Staging: cxt1e1: remove rcs keywords and log 2011-11-26 18:11:35 -08:00
pmcc4_private.h staging: cxt1e1: remove typedef comet_t 2013-11-10 08:05:15 -08:00
pmcc4_sysdep.h
sbe_bid.h Staging: cxt1e1: remove rcs keywords and log 2011-11-26 18:11:35 -08:00
sbe_promformat.h Staging: cxt1e1: remove rcs keywords and log 2011-11-26 18:11:35 -08:00
sbecom_inline_linux.h staging: cxt1e1: sbecom_inline_linux.h: Return NULL instead of 0 2013-09-30 18:48:40 -07:00
sbecrc.c staging: cxt1e1: sbecrc.c: Use NULL instead of 0 2013-09-30 18:48:40 -07:00
sbeid.c Drivers: Staging: cxt1e1: stbeid: Fixed whitespace between function and parameters 2013-11-19 15:34:51 -08:00
sbeproc.c staging: cxt1e1: sbeproc.c: Use NULL instead of 0 2013-09-30 18:48:40 -07:00
sbeproc.h Staging/cxt1e1:Fixing foo * bar should be foo *bar 2013-05-22 15:28:30 -07:00
sbew_ioc.h Staging:cxt1e1: Fixes whitespace around commas in sbew_ioc.h 2013-10-11 13:09:57 -07:00