Ning Qiang fd97e4ad6d macintosh/adb: fix oob read in do_adb_query() function ...

In do_adb_query() function of drivers/macintosh/adb.c, req->data is copied
form userland. The parameter "req->data[2]" is missing check, the array
size of adb_handler[] is 16, so adb_handler[req->data[2]].original_address and
adb_handler[req->data[2]].handler_id will lead to oob read.

Cc: stable <stable@kernel.org>
Signed-off-by: Ning Qiang <sohu0106@126.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Acked-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/20220713153734.2248-1-sohu0106@126.com

2022-07-20 22:06:30 +10:00

..

ams

macintosh/ams: Remove unneeded result variable

2022-05-04 19:37:45 +10:00

adb-iop.c

…

adb.c

macintosh/adb: fix oob read in do_adb_query() function

2022-07-20 22:06:30 +10:00

adbhid.c

macintosh/adb: Use swap() to make code cleaner

2022-05-04 19:37:45 +10:00

ans-lcd.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

ans-lcd.h

…

apm_emu.c

…

Kconfig

macintosh: via-pmu and via-cuda need RTC_LIB

2022-05-22 15:58:30 +10:00

mac_hid.c

macintosh/mac_hid.c: simplify subdirectory registration with register_sysctl()

2022-01-22 08:33:35 +02:00

macio_asic.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

macio_sysfs.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

macio-adb.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

Makefile

macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled

2022-05-22 15:58:30 +10:00

mediabay.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

rack-meter.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

smu.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

therm_adt746x.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

therm_windtunnel.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

via-cuda.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

via-macii.c

…

via-pmu-backlight.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

via-pmu-event.c

…

via-pmu-event.h

…

via-pmu-led.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

via-pmu.c

macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled

2022-05-22 15:58:30 +10:00

windfarm_ad7417_sensor.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_core.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_cpufreq_clamp.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_fcu_controls.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_lm75_sensor.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_lm87_sensor.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_max6690_sensor.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_mpu.h

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_pid.c

…

windfarm_pid.h

…

windfarm_pm72.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_pm81.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_pm91.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_pm112.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_pm121.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_rm31.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_smu_controls.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_smu_sat.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm_smu_sensors.c

macintosh: Prepare cleanup of powerpc's asm/prom.h

2022-05-11 23:06:39 +10:00

windfarm.h

…