kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-18 19:12:56 +00:00
Code Issues Releases Packages Activity
linux/drivers
History
Johan Hovold 7698ed67de zd1211rw: fix NULL-deref at probe 
commit ca260ece6a upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

Fixes: a1030e92c1 ("[PATCH] zd1211rw: Convert installer CDROM device into WLAN device")
Cc: Daniel Drake <dsd@gentoo.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
[bwh: Backported to 3.16: adjust filename]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
History 2017-08-26 02:14:25 +01:00
..
accessibility printk: move braille console support into separate braille.[ch] files 2013-07-31 14:41:03 -07:00
acpi ACPI / power: Avoid maybe-uninitialized warning 2017-07-18 18:40:37 +01:00
amba ARM: SoC: driver changes 2014-04-05 15:37:40 -07:00
ata ata: sata_mv:- Handle return value of devm_ioremap. 2017-03-16 02:26:52 +00:00
atm atm: iphase: fix misleading indention 2017-04-04 22:21:54 +01:00
auxdisplay auxdisplay: ks0108: fix refcount 2015-09-28 10:21:35 +01:00
base PM / QoS: Fix memory leak on resume_latency.notifiers 2017-06-05 21:17:11 +01:00
bcma bcma: use (get|put)_device when probing/removing device driver 2017-06-05 21:17:01 +01:00
block xen-blkback: don't leak stack data via response ring 2017-07-18 18:40:40 +01:00
bluetooth Bluetooth: Add another AR3012 04ca:3018 device 2017-06-05 21:17:09 +01:00
bus bus: vexpress-config: fix device reference leak 2017-03-16 02:26:27 +00:00
cdrom Merge branch 'for-linus' of git://git.kernel.dk/linux-block 2014-06-11 08:41:17 -07:00
char char: lp: fix possible integer overflow in lp_setup() 2017-07-18 18:40:40 +01:00
clk clk: renesas: mstp: ensure register writes complete 2017-06-05 21:17:10 +01:00
clocksource clocksource/exynos_mct: Clear interrupt when cpu is shut down 2017-03-16 02:27:00 +00:00
connector connector: bump skb->users before callback invocation 2016-01-28 10:14:29 +00:00
cpufreq cpufreq: s3c2416: double free on driver init error path 2017-06-05 21:17:05 +01:00
cpuidle cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter() 2016-08-22 22:38:01 +01:00
crypto crypto: caam - fix RNG deinstantiation error checking 2017-07-18 18:40:30 +01:00
dca dca: convert to idr_alloc() 2013-02-27 19:10:15 -08:00
devfreq PM / devfreq: Fix the bug of devfreq_add_device when governor is NULL 2017-03-16 02:26:43 +00:00
dio m68k: don't export static inline functions 2009-12-06 11:18:28 +01:00
dma dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer 2016-03-04 10:26:40 +00:00
edac EDAC: Increment correct counter in edac_inc_ue_error() 2016-08-22 22:37:51 +01:00
eisa Revert "EISA: Initialize device before its resources" 2014-01-17 14:57:29 -07:00
extcon extcon: palmas: Use devm_extcon_dev_allocate for extcon_dev 2014-04-29 09:52:12 +09:00
firewire firewire: net: fix fragmented datagram_size off-by-one 2017-02-23 03:54:28 +00:00
firmware efi/libstub: Allocate headspace in efi_get_memory_map() 2016-11-20 01:17:23 +00:00
fmc Merge 3.14-rc5 into char-misc-next 2014-03-02 19:53:09 -08:00
gpio gpio:mcp23s08 Fixed missing interrupts 2017-07-18 18:40:18 +01:00
gpu drm/vmwgfx: Make sure backup_handle is always valid 2017-07-18 18:40:40 +01:00
hid HID: hid-input: Add parentheses to quell gcc warning 2017-04-04 22:21:56 +01:00
hsi hsi: omap_ssi_port: Prevent warning if cawake_gpio is not defined. 2015-12-13 17:49:33 +00:00
hv drivers: hv: Turn off write permission on the hypercall page 2017-06-05 21:17:07 +01:00
hwmon hwmon: (asus_atk0110) fix uninitialized data access 2017-07-18 18:40:22 +01:00
hwspinlock A single patch from Vincent extending OMAP's hwspinlock support to OMAP5. 2013-05-07 14:01:27 -07:00
i2c i2c: riic: correctly finish transfers 2017-06-05 21:17:06 +01:00
ide Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/ide 2014-07-21 22:44:24 -07:00
idle intel_idle: fix IVT idle state table setting 2014-04-21 23:36:07 +02:00
iio iio: hid-sensor-attributes: Fix sensor property setting failure. 2017-07-18 18:40:29 +01:00
infiniband IB/qib: fix false-postive maybe-uninitialized warning 2017-07-18 18:40:23 +01:00
input Input: i8042 - add Clevo P650RS to the i8042 reset list 2017-07-18 18:40:38 +01:00
iommu iommu/vt-d: Don't over-free page table directories 2017-06-05 21:17:01 +01:00
ipack ipack: convert bus code to use dev_groups 2013-10-16 18:40:57 -07:00
irqchip irqchip/gic: Ensure ordering between read of INTACK and shared data 2016-08-22 22:37:57 +01:00
isdn isdn/gigaset: fix NULL-deref at probe 2017-07-18 18:40:12 +01:00
leds leds / PM: fix hibernation on arm when gpio-led used with CPU led trigger 2015-07-09 14:36:01 +01:00
lguest lguest: fix out-by-one error in address checking. 2015-06-03 14:30:03 +01:00
macintosh windfarm: decrement client count when unregistering 2015-09-30 13:20:39 +01:00
mailbox drivers/mailbox/omap: make mbox->irq signed for error handling 2014-01-23 16:36:53 -08:00
mcb mcb: Fixed bar number assignment for the gdd 2016-08-22 22:37:53 +01:00
md md/raid1/10: fix potential deadlock 2017-07-18 18:40:10 +01:00
media pvrusb2: reduce stack usage pvr2_eeprom_analyze() 2017-08-26 02:14:23 +01:00
memory memory: mvebu-devbus: add a devbus, keep-config property 2014-04-29 13:17:10 +00:00
memstick memstick: rtsx_usb_ms: Manage runtime PM when accessing the device 2017-02-23 03:54:16 +00:00
message mptfusion: enable no_write_same for vmware scsi disks 2014-10-30 09:40:12 -07:00
mfd mfd: core: Fix device reference leak in mfd_clone_cell 2017-02-23 03:54:34 +00:00
misc mei: move write cb to completion on credentials failures 2017-03-16 02:26:49 +00:00
mmc mmc: sdhci: Disable runtime pm when the sdio_irq is enabled 2017-07-18 18:40:27 +01:00
mtd ubi/upd: Always flush after prepared for an update 2017-07-18 18:40:25 +01:00
net zd1211rw: fix NULL-deref at probe 2017-08-26 02:14:25 +01:00
nfc NFC: microread: Potential overflows in microread_target_discovered() 2014-10-05 13:41:05 -07:00
ntb ntb: Use pci_enable_msix_range() instead of pci_enable_msix() 2014-04-07 10:59:20 -07:00
nubus kernel/printk: use symbolic defines for console loglevels 2014-06-04 16:54:17 -07:00
of of_mdio: fix node leak in of_phy_register_fixed_link error path 2017-02-23 03:54:37 +00:00
oprofile oprofile, nmi-timer: Fix CPU hotplug callback registration 2014-03-20 13:43:46 +01:00
parisc parisc iommu: fix panic due to trying to allocate too large region 2016-01-18 22:27:29 +00:00
parport parport: fix menu breakage 2014-07-25 18:00:23 -07:00
pci powerpc/pci/rpadlpar: Fix device reference leaks 2017-03-16 02:26:20 +00:00
pcmcia Disable write buffering on Toshiba ToPIC95 2015-07-15 10:00:33 +01:00
phy phy: sun4i-usb: Use spinlock to guard phyctl register access 2017-02-23 03:53:59 +00:00
pinctrl pinctrl: sh-pfc: Update info pointer after SoC-specific init 2017-08-26 02:14:24 +01:00
platform platform/x86: acer-wmi: setup accelerometer when machine has appropriate notify event 2017-06-05 21:17:22 +01:00
pnp ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage 2015-07-15 10:01:34 +01:00
power power: supply: bq24190_charger: Handle fault before status on interrupt 2017-06-05 21:16:56 +01:00
powercap powercap / RAPL: fix BIOS lock check 2016-01-25 10:43:36 +00:00
pps pps: do not crash when failed to register 2016-11-20 01:16:57 +00:00
ps3 ps3-vuart: don't use PREPARE_WORK 2014-03-07 10:24:48 -05:00
ptp ptp: ptp_pch depends on x86_32 2014-06-17 15:43:48 -07:00
pwm pwm: Fix device reference leak 2017-02-23 03:54:40 +00:00
rapidio rapidio/tsi721_dma: fix failure to obtain transaction descriptor 2014-07-30 17:16:13 -07:00
regulator regulator: core: Fix regualtor_ena_gpio_free not to access pin after freeing 2017-07-02 17:13:02 +01:00
remoteproc remoteproc: avoid stack overflow in debugfs file 2016-01-05 12:08:23 +00:00
reset reset: sunxi: fix spinlock initialization 2015-01-22 16:33:34 +00:00
rpmsg A small pull request consisting of: 2013-05-07 14:02:00 -07:00
rtc rtc: ds1307: Fix relying on reset value for weekday 2016-11-20 01:16:47 +00:00
s390 s390/chsc: Add exception handler for CHSC instruction 2017-06-05 21:17:14 +01:00
sbus bbc-i2c: Fix BBC I2C envctrl on SunBlade 2000 2014-08-14 10:09:44 +08:00
scsi scsi: sd: Fix capacity calculation with 32-bit sector_t 2017-07-18 18:40:33 +01:00
sfi SFI / ACPI: Fix warnings reported during builds with W=1 2013-12-07 01:24:33 +01:00
sh SH Driver Update for v3.16 2014-06-06 11:44:09 -07:00
sn Drivers: misc: remove __dev* attributes. 2013-01-03 15:57:16 -08:00
soc soc: qcom: fix of_device_id table 2014-05-26 21:27:09 +02:00
spi spi: sunxi: fix transfer timeout 2016-08-22 22:38:14 +01:00
spmi spmi: pm: drop bus-level PM suspend/resume routines 2014-03-08 22:15:52 -08:00
ssb ssb: Fix error routine when fallback SPROM fails 2017-03-16 02:26:23 +00:00
staging staging: comedi: jr3_pci: cope with jiffies wraparound 2017-08-26 02:14:23 +01:00
target iscsi-target: Drop work-around for legacy GlobalSAN initiator 2017-07-18 18:40:29 +01:00
tc TC: Handle device_register() errors. 2014-06-26 10:48:23 +01:00
thermal thermal: hwmon: Properly report critical temperature in sysfs 2017-03-16 02:26:26 +00:00
tty serial: sh-sci: Fix panic when serial console and DMA are enabled 2017-08-26 02:14:24 +01:00
uio uio: fix dmem_region_start computation 2017-02-23 03:53:56 +00:00
usb xhci: Manually give back cancelled URB if we can't queue it for cancel 2017-07-18 18:40:25 +01:00
uwb uwb: i1480-dfu: fix NULL-deref at probe 2017-07-18 18:40:13 +01:00
vfio vfio/pci: Fix integer overflows, bitmask check 2016-11-20 01:17:37 +00:00
vhost vhost: actually track log eventfd file 2015-08-25 10:13:39 +01:00
video xen, fbfront: fix connecting to backend 2017-07-18 18:40:33 +01:00
virt drivers: clean-up prom.h implicit includes 2013-10-09 20:04:04 -05:00
virtio virtio_balloon: prevent uninitialized variable use 2017-07-18 18:40:24 +01:00
vlynq drivers/vlynq/vlynq.c: fix another resource size off by 1 error 2014-01-23 16:36:55 -08:00
vme vme: Fix wrong pointer utilization in ca91cx42_slave_get 2017-03-16 02:26:56 +00:00
w1 w1: don't leak refcount on slave attach failure in w1_attach_slave_device() 2017-06-05 21:16:58 +01:00
watchdog watchdog: rc32434_wdt: fix ioctl error handling 2016-05-01 00:05:52 +02:00
xen xen/acpi: upload PM state from init-domain to Xen 2017-07-18 18:40:22 +01:00
zorro zorro/UAPI: Use proper types (endianness/size) in <linux/zorro.h> 2013-11-26 11:09:09 +01:00
Kconfig soc: Introduce drivers/soc place-holder for SOC specific drivers 2014-05-23 11:37:46 -05:00
Makefile Char / misc driver patches for 3.16-rc1 2014-06-03 08:06:56 -07:00