linux/drivers/misc/ibmasm
Jann Horn a0341fc198 ibmasm: don't write out of bounds in read handler
This read handler had a lot of custom logic and wrote outside the bounds of
the provided buffer. This could lead to kernel and userspace memory
corruption. Just use simple_read_from_buffer() with a stack buffer.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-07-07 09:59:35 +02:00
..
command.c
dot_command.c
dot_command.h
event.c misc: ibmasm: Return error on error path 2017-10-12 15:37:19 +02:00
heartbeat.c
i2o.h
ibmasm.h misc: ibmasm: Replace timeval with timespec64 2016-02-11 20:06:46 -08:00
ibmasmfs.c ibmasm: don't write out of bounds in read handler 2018-07-07 09:59:35 +02:00
lowlevel.c
lowlevel.h
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
module.c misc: ibmasm: Return error on error path 2017-10-12 15:37:19 +02:00
r_heartbeat.c sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h> 2017-03-02 08:42:32 +01:00
remote.c
remote.h
uart.c