rubenslte/android_kernel_samsung_msm8226-rubenslte
1
Fork 0
forked from rubenslte/android_kernel_samsung_msm8226
Code Pull Requests Activity
Files
7d3e1ba99c5a22d8a6c2c00f40886abe2df760b0
android_kernel_samsung_msm8…/drivers
T
History
Vignesh Viswanathan 7d3e1ba99c wlan: Fix buffer overrun in function ProcSetReqInternal 
In function ProcSetReqInternal, valueLen is obtained from the
message buffer pParam. This valueLen is used as argument to the
function GetStrValue where the contents of the buffer pParam is
copied to pMac->cfg.gSBuffer for valueLen number of bytes. However
the array pMac->cfg.gSBuffer is a static array of size CFG_MAX_STR_LEN.
If the value of valueLen exceeds CFG_MAX_STR_LEN, a buffer overwrite
will occur in GetStrValue.

Add Sanity check to make sure valueLen does not exceed CFG_MAX_STR_LEN.

Change-Id: Id16d4c4b8d2414c00a0fae8f8292f011d0763b84
CRs-Fixed: 2158080
2020-05-21 10:54:41 +02:00
..
accessibility
…
acpi
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
adsp_factory
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
amba
…
ata
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
atm
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
auxdisplay
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
barcode_emul
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
base
mm: Fix incorrect type conversion for size during dma allocation
2019-08-08 12:19:52 +02:00
battery
battery: sec_battery: Migrate to alarmtimer interface
2019-08-06 12:33:17 +02:00
bcma
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
bif
bif: qpnp-bsi: request BSI interrupts with level high triggering
2015-09-10 10:50:52 +05:30
block
floppy: fix out-of-bounds read in copy_buffer
2020-05-20 09:44:22 +02:00
bluetooth
drivers: bluetooth: Fix direct references to HZ
2019-08-05 14:21:57 +02:00
cdrom
BACKPORT: block: add blk_rq_set_block_pc()
2019-08-06 12:26:35 +02:00
char
diag: dci: Validate dci client entries prior to access
2020-05-20 09:43:53 +02:00
clk
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
clocksource
sched_clock: Backport high-resolution support
2019-08-05 14:21:53 +02:00
connector
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
coresight
coresight: tmc: Fix the unbalanced lock in tmc_read()
2019-08-08 15:00:19 +02:00
cpufreq
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
cpuidle
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
crypto
crypto: msm: qcrypto: Remove duplicate definition of list_next_entry()
2019-08-06 12:31:22 +02:00
dca
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
devfreq
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
dio
…
dma
Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0
2019-08-06 11:41:21 +02:00
edac
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
eisa
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
extcon
misc: Fix system_rev type mismatch
2019-08-05 09:13:25 +02:00
felica
felica: Allow to compile without CONFIG_SEC_DEBUG
2019-08-09 10:00:22 +02:00
fingerprint
drivers: fingerprint: Kill FEATURE_SPI_WAKELOCK
2019-08-05 09:13:27 +02:00
firewire
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
firmware
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
gpio
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
gpu
misc: fix some GCC warnings
2019-08-23 13:20:00 +02:00
hid
HID: Fix assumption that devices have inputs
2020-05-20 09:44:43 +02:00
hsi
…
hv
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
hwmon
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
hwspinlock
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
i2c
i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
2020-03-07 14:01:44 +01:00
ide
mm: Backport ZRAM/ZSMALLOC from Google kernel
2019-08-06 08:17:38 +02:00
idle
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
ieee802154
…
infiniband
fs: Limit sys_mount to only request filesystem modules.
2019-08-06 10:44:59 +02:00
input
Input: ff-memless - kill timer in destroy()
2020-05-20 09:44:33 +02:00
iommu
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
irda
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
isdn
mISDN: enforce CAP_NET_RAW for raw sockets
2020-05-20 09:44:18 +02:00
leds
leds-qpnp: let ms01 devices use change_boost_control
2020-05-02 17:56:57 +05:30
lguest
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
macintosh
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
mca
…
md
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
media
msm: camera_v2: handle the error value returned during get clock
2020-05-20 09:45:31 +02:00
memstick
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
message
…
mfd
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
misc
sm5502: auto enable/disable 8226_smbbp_otg regulator
2020-05-20 15:00:46 +02:00
mmc
misc: fix some GCC warnings
2019-08-23 13:20:00 +02:00
motor
ss_vibrator: Make sysfs compatible with CMHW
2020-03-07 14:01:44 +01:00
mtd
fs: Limit sys_mount to only request filesystem modules.
2019-08-06 10:44:59 +02:00
net
ath6kl: add some bounds checking
2020-05-20 09:44:21 +02:00
nfc
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
nubus
…
of
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
oprofile
fs: Limit sys_mount to only request filesystem modules.
2019-08-06 10:44:59 +02:00
parisc
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
parport
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
pci
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
pcmcia
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
pinctrl
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
platform
msm: ipa: Fix to validate the buffer size
2020-03-07 14:01:45 +01:00
pnp
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
power
leds-qpnp: let ms01 devices use change_boost_control
2020-05-02 17:56:57 +05:30
pps
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
ps3
…
ptp
…
qsc
misc: Import SM-G900H kernel source code
2019-08-02 15:14:10 +02:00
rapidio
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
regulator
misc: fix some GCC warnings
2019-08-23 13:20:00 +02:00
remoteproc
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
rpmsg
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
rtc
rtc: pm8xxx: move device_init_wakeup() before rtc_register
2019-08-06 12:31:33 +02:00
s390
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
sbus
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
scsi
scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()
2020-03-07 14:01:44 +01:00
sensorhub
drivers: sensorhub: stm: Kill all the kmsg spam
2019-08-08 15:25:13 +02:00
sensors
drivers: sensors: migrate k2hh.c to alarmtimer interface
2019-08-08 10:42:14 +02:00
sfi
…
sh
…
slimbus
slim-msm: Synchronize SSR callbacks
2019-08-06 11:48:23 +02:00
sn
…
spi
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
spmi
Merge tag 'LA.BF.1.1.3-02310-8x26.0' into lineage-16.0
2019-08-05 11:18:51 +02:00
ssb
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
staging
wlan: Fix buffer overrun in function ProcSetReqInternal
2020-05-21 10:54:41 +02:00
switch
…
target
BACKPORT: block: add blk_rq_set_block_pc()
2019-08-06 12:26:35 +02:00
tc
…
thermal
add hrtimer support to qpnp-sec-charger.c and msm_thermal.c (not fully)
2019-08-06 12:31:35 +02:00
tty
BACKPORT: fiq_debugger: restrict access to critical commands.
2019-08-06 12:24:29 +02:00
uio
…
usb
msm_otg: compile otg as module platform driver
2020-05-20 15:02:09 +02:00
uwb
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
vhost
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
video
mdss: improved video_pingpong (s6e8aa0a) + general mdss improvements
2020-05-20 15:01:51 +02:00
virt
…
virtio
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
vlynq
…
w1
Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0
2019-08-06 11:41:21 +02:00
watchdog
Merge tag 'v3.4.113' into lineage-16.0
2019-08-05 14:20:47 +02:00
xen
fs: Limit sys_mount to only request filesystem modules.
2019-08-06 10:44:59 +02:00
zorro
…
Kconfig
msm: gud: Remove gud driver
2019-08-08 12:10:20 +02:00
Makefile
drivers: motor: import vibrator driver from CRJ1 package
2020-03-07 14:01:44 +01:00