Minki/linux
1
0
Fork 1
mirror of https://github.com/torvalds/linux.git synced 2024-11-06 20:21:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
8bde9a62ee
linux/drivers/usb/misc
History
Xi Wang 8bde9a62ee usb: usbtest: avoid integer overflow in alloc_sglist() 
A large `nents' from userspace could overflow the allocation size,
leading to memory corruption.

| alloc_sglist()
| usbtest_ioctl()

Use kmalloc_array() to avoid the overflow.

Signed-off-by: Xi Wang <xi.wang@gmail.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2012-04-17 15:54:57 -07:00
..
sisusbvga usb: misc: sisusbvga: fix information leak to userland 2010-11-11 07:14:06 -08:00
adutux.c USB: convert drivers/usb/* to use module_usb_driver() 2011-11-18 09:34:02 -08:00
appledisplay.c atomic: use <linux/atomic.h> 2011-07-26 16:49:47 -07:00
cypress_cy7c63.c USB: convert drivers/usb/* to use module_usb_driver() 2011-11-18 09:34:02 -08:00
cytherm.c USB: convert drivers/usb/* to use module_usb_driver() 2011-11-18 09:34:02 -08:00
emi26.c drivers/usb/misc/emi26.c & emi62.c: fix warnings 2012-01-24 11:16:07 -08:00
emi62.c drivers/usb/misc/emi26.c & emi62.c: fix warnings 2012-01-24 11:16:07 -08:00
ftdi-elan.c module_param: make bool parameters really bool (drivers & misc) 2012-01-13 09:32:20 +10:30
idmouse.c USB: convert drivers/usb/* to use module_usb_driver() 2011-11-18 09:34:02 -08:00
iowarrior.c module_param: make bool parameters really bool (drivers & misc) 2012-01-13 09:32:20 +10:30
isight_firmware.c Merge branch 'usb-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb 2012-01-09 12:09:47 -08:00
Kconfig USB: add driver for Meywa-Denki & Kayac YUREX 2010-10-22 10:21:51 -07:00
ldusb.c USB: convert drivers/usb/* to use module_usb_driver() 2011-11-18 09:34:02 -08:00
legousbtower.c Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2012-01-08 12:19:57 -08:00
Makefile usb: makefile cleanup 2010-10-22 10:22:07 -07:00
rio500_usb.h
rio500.c USB: convert drivers/usb/* to use module_usb_driver() 2011-11-18 09:34:02 -08:00
trancevibrator.c USB: convert drivers/usb/* to use module_usb_driver() 2011-11-18 09:34:02 -08:00
usb_u132.h
usblcd.c USB: convert drivers/usb/* to use module_usb_driver() 2011-11-18 09:34:02 -08:00
usbled.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid 2012-01-10 10:48:28 -08:00
usbsevseg.c USB: usbsevseg: fix max length 2012-01-24 12:08:36 -08:00
usbtest.c usb: usbtest: avoid integer overflow in alloc_sglist() 2012-04-17 15:54:57 -07:00
uss720.c USB: uss720 fixup refcount position 2011-03-23 13:14:31 -07:00
yurex.c USB: convert drivers/usb/* to use module_usb_driver() 2011-11-18 09:34:02 -08:00