linux/drivers/misc/vmw_vmci
Dan Carpenter 2e45354645 VMCI: integer overflow in vmci_datagram_dispatch()
This is untrusted user data from vmci_host_do_send_datagram() so the
VMCI_DG_SIZE() macro can have an integer overflow.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2014-09-23 23:26:42 -07:00
..
Kconfig Hoist memcpy_fromiovec/memcpy_toiovec into lib/ 2013-05-20 10:24:22 +09:30
Makefile VMCI: Some header and config files. 2013-01-08 16:15:57 -08:00
vmci_context.c
vmci_context.h
vmci_datagram.c VMCI: integer overflow in vmci_datagram_dispatch() 2014-09-23 23:26:42 -07:00
vmci_datagram.h
vmci_doorbell.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
vmci_doorbell.h VMCI: doorbell implementation. 2013-01-08 16:15:55 -08:00
vmci_driver.c VMCI: Add support for virtual IOMMU 2013-08-27 21:42:12 -07:00
vmci_driver.h VMCI: Add support for virtual IOMMU 2013-08-27 21:42:12 -07:00
vmci_event.c VMCI: event handling implementation. 2013-01-08 16:15:55 -08:00
vmci_event.h VMCI: event handling implementation. 2013-01-08 16:15:55 -08:00
vmci_guest.c misc: remove DEFINE_PCI_DEVICE_TABLE usage 2014-07-18 16:54:23 -07:00
vmci_handle_array.c VMCI: handle array implementation. 2013-01-08 16:15:55 -08:00
vmci_handle_array.h VMCI: handle array implementation. 2013-01-08 16:15:55 -08:00
vmci_host.c vmw_vmci: Convert driver to use get_user_pages_fast() 2013-10-05 18:04:55 -07:00
vmci_queue_pair.c vmw_vmci: Convert driver to use get_user_pages_fast() 2013-10-05 18:04:55 -07:00
vmci_queue_pair.h VMCI: Remove non-blocking/pinned queuepair support 2013-08-27 21:42:12 -07:00
vmci_resource.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
vmci_resource.h VMCI: resource object implementation. 2013-01-08 16:15:56 -08:00
vmci_route.c VMCI: routing implementation. 2013-01-08 16:15:56 -08:00
vmci_route.h VMCI: routing implementation. 2013-01-08 16:15:56 -08:00