Tomas Winkler 51072c0f5b mei: hdcp: fix mei_hdcp_verify_mprime() input parameter ... wired_cmd_repeater_auth_stream_req_in has a variable length array at the end. we use struct_size() overflow macro to determine the size for the allocation and sending size. This also fixes bug in case number of streams is > 0 in the original submission. This bug was not triggered as the number of streams is always one. Fixes: c56967d674 (mei: hdcp: Replace one-element array with flexible-array member) Fixes: 0a1af1b5c1 (misc/mei/hdcp: Verify M_prime) Cc: <stable@vger.kernel.org> # v5.1+: c56967d674 (mei: hdcp: Replace one-element array with flexible-array member) Signed-off-by: Tomas Winkler <tomas.winkler@intel.com> Reviewed-by: Gustavo A. R. Silva <gustavoars@kernel.org> Link: https://lore.kernel.org/r/20200818075406.2532605-1-tomas.winkler@intel.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-08-18 15:39:38 +02:00
..
altera-stapl	altera-stapl: altera_get_note: prevent write beyond end of 'key'	2020-03-03 08:02:57 +01:00
c2port	misc: c2port: core: Ensure source size does not equal destination size in strncpy()	2020-06-29 18:45:52 +02:00
cardreader	cardreader/rtsx_pcr.c: use generic power management	2020-07-23 15:17:37 +02:00
cb710	misc: cb710: sgbuf2: Add missing documentation for cb710_sg_dwiter_write_next_block()'s 'data' arg	2020-06-29 18:45:53 +02:00
cxl	cxl: Change PCIBIOS_SUCCESSFUL to 0	2020-07-13 15:39:52 +02:00
echo	char: Replace HTTP links with HTTPS ones	2020-07-23 09:44:15 +02:00
eeprom	misc: eeprom: at24: Tell the compiler that ACPI functions may not be used	2020-07-10 14:50:51 +02:00
genwqe	pci-v5.9-changes	2020-08-07 18:48:15 -07:00
habanalabs	habanalabs: remove unused but set variable 'ctx_asid'	2020-07-29 18:02:21 +02:00
ibmasm	misc: ibmasm: dot_command: Demote function headers from kerneldoc	2020-07-01 15:08:03 +02:00
lis3lv02d
lkdtm	misc: lkdtm: bugs: At least try to use popuated variable	2020-06-29 18:45:52 +02:00
mei	mei: hdcp: fix mei_hdcp_verify_mprime() input parameter	2020-08-18 15:39:38 +02:00
mic	Char/Misc driver patches for 5.9-rc1	2020-08-05 11:43:47 -07:00
ocxl	ocxl: Address kernel doc errors & warnings	2020-07-29 23:47:52 +10:00
sgi-gru	x86/cpu: Relocate sync_core() to sync_core.h	2020-07-27 12:42:06 +02:00
sgi-xp	misc: sgi-xp: xp_main: Staticify local functions xp_init() and xp_exit()	2020-07-01 15:08:02 +02:00
ti-st	misc: ti-st: st_kim: Tidy-up bespoke commentry	2020-06-29 18:45:52 +02:00
uacce	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2020-08-07 21:14:30 -07:00
vmw_vmci	vmci_host: get rid of pointless access_ok()	2020-05-29 11:06:38 -04:00
ad525x_dpot-i2c.c
ad525x_dpot-spi.c
ad525x_dpot.c	docs: misc-devices/pci-endpoint-test.txt: convert to ReST	2020-06-19 14:05:49 -06:00
ad525x_dpot.h
apds990x.c
apds9802als.c
atmel_tclib.c
atmel-ssc.c	misc: atmel-ssc: lock with mutex instead of spinlock	2020-06-29 19:10:51 +02:00
bh1770glc.c
cs5535-mfgpt.c
ds1682.c
dummy-irq.c
enclosure.c	misc: enclosure: Update enclosure_remove_device() documentation to match reality	2020-07-01 15:05:37 +02:00
fastrpc.c	misc: fastrpc: fix potential fastrpc_invoke_ctx leak	2020-05-15 16:21:08 +02:00
hmc6352.c
hpilo.c	misc: hpilo: avoid a useless memset	2020-07-23 12:56:49 +02:00
hpilo.h	hpilo: Replace one-element array with flexible-array member	2020-07-14 18:21:25 +02:00
ibmvmc.c	mm, treewide: rename kzfree() to kfree_sensitive()	2020-08-07 11:33:22 -07:00
ibmvmc.h
ics932s401.c
isl29003.c
isl29020.c
Kconfig	Char/Misc driver patches for 5.9-rc1	2020-08-05 11:43:47 -07:00
kgdbts.c	maccess: rename probe_kernel_{read,write} to copy_{from,to}_kernel_nofault	2020-06-17 10:57:41 -07:00
lattice-ecp3-config.c	misc: lattice-ecp3-config: Remove set but clearly unused variable 'ret'	2020-07-01 15:05:37 +02:00
Makefile	bus: vexpress-config: Merge vexpress-syscfg into vexpress-config	2020-05-13 12:42:46 -05:00
pch_phub.c	misc: pch_phub: Remove superfluous descriptions to non-existent args 'offset_address'	2020-07-01 15:05:37 +02:00
pci_endpoint_test.c	misc: pci_endpoint_test: Add J721E in pci_device_id table	2020-08-03 14:50:08 +01:00
phantom.c	misc/phantom.c: use generic power management	2020-06-29 18:43:42 +02:00
pti.c	misc: pti: Remove unparsable empty line in function header	2020-07-01 15:05:36 +02:00
pvpanic.c	misc: pvpanic: add crash loaded event	2020-01-14 15:07:37 +01:00
qcom-coincell.c
sram-exec.c	char: Replace HTTP links with HTTPS ones	2020-07-23 09:44:15 +02:00
sram.c
sram.h
tifm_7xx1.c	misc/tifm_7xx1.c: use generic power management	2020-06-29 18:43:42 +02:00
tifm_core.c
tsl2550.c	misc: tsl2550: remove redundant initialization to variable r	2020-01-14 15:16:51 +01:00
vmw_balloon.c
xilinx_sdfec.c	misc: xilinx-sdfec: convert get_user_pages() --> pin_user_pages()	2020-05-27 11:09:26 +02:00