Dan Carpenter
02bf8fbfb4
HID: roccat: add bounds checking in kone_sysfs_write_settings() ...
[ Upstream commit d4f98dbfe717490e771b6e701904bfcf4b4557f0 ]
This code doesn't check if "settings->startup_profile" is within bounds
and that could result in an out of bounds array access. What the code
does do is it checks if the settings can be written to the firmware, so
it's possible that the firmware has a bounds check? It's safer and
easier to verify when the bounds checking is done in the kernel.
Fixes: 14bf62cde7
2020-10-29 09:57:39 +01:00
ACPI: Always build evged in
2020-10-17 10:11:22 +02:00
binder: Remove bogus warning on failed same-process transaction
2020-10-29 09:57:37 +01:00
ata: sata_mv, avoid trigerrable BUG_ON
2020-10-01 13:18:26 +02:00
atm: eni: fix the missed pci_disable_device() for eni_init_one()
2020-10-01 13:18:17 +02:00
driver core: Fix probe_count imbalance in really_probe()
2020-10-14 10:32:59 +02:00
rbd: require global CAP_SYS_ADMIN for mapping and unmapping
2020-09-17 13:47:53 +02:00
Bluetooth: hci_uart: Cancel init work before unregistering
2020-10-29 09:57:35 +01:00
bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
2020-10-01 13:17:37 +02:00
ipmi:bt-bmc: Fix error handling and status check
2020-10-01 13:18:01 +02:00
clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
2020-10-07 08:01:28 +02:00
clocksource/drivers/timer-gx6605s: Fixup counter reload
2020-10-07 08:01:25 +02:00
cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn
2020-10-01 13:17:47 +02:00
cpuidle: Fixup IRQ state
2020-09-09 19:12:21 +02:00
cypto: mediatek - fix leaks in mtk_desc_ring_alloc
2020-10-29 09:57:33 +01:00
dax: Fix alloc_dax_region() compile warning
2020-10-01 13:17:15 +02:00
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
2020-10-01 13:17:14 +02:00
dmaengine: tegra-apb: Prevent race conditions on channel's freeing
2020-10-01 13:17:36 +02:00
dmabuf: fix NULL pointer dereference in dma_buf_release()
2020-10-01 13:18:24 +02:00
EDAC/ti: Fix handling of platform_get_irq() error
2020-10-29 09:57:29 +01:00
extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()'
2020-06-24 17:50:36 +02:00
firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp
2020-10-01 13:17:37 +02:00
fpga: dfl: fix bug in port reset handshake
2020-07-29 10:18:31 +02:00
gnss: sirf: fix error return code in sirf_probe()
2020-06-22 09:31:20 +02:00
gpio: aspeed: fix ast2600 bank properties
2020-10-07 08:01:29 +02:00
drm/crc-debugfs: Fix memleak in crc_control_write
2020-10-29 09:57:37 +01:00
HID: roccat: add bounds checking in kone_sysfs_write_settings()
2020-10-29 09:57:39 +01:00
Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
2020-09-23 12:40:40 +02:00
hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
2020-10-29 09:57:32 +01:00
coresight: etm4x: Fix use-after-free of per-cpu etm drvdata
2020-10-01 13:18:02 +02:00
i2c: owl: Clear NACK and BUS error bits
2020-10-14 10:33:01 +02:00
iio: adc: qcom-spmi-adc5: fix driver name
2020-10-07 08:01:25 +02:00
IB/iser: Always check sig MR before putting it to the free pool
2020-10-01 13:17:50 +02:00
Input: ati_remote2 - add missing newlines when printing module parameters
2020-10-14 10:33:06 +02:00
iommu/vt-d: Fix lockdep splat in iommu_flush_dev_iotlb()
2020-10-14 10:33:02 +02:00
irqchip/stm32-exti: Avoid losing interrupts due to clearing pending bits by mistake
2020-09-03 11:27:06 +02:00
leds: mlxreg: Fix possible buffer overflow
2020-10-01 13:17:14 +02:00
macintosh/via-macii: Access autopoll_devs when inside lock
2020-08-19 08:16:15 +02:00
mailbox: zynqmp-ipi: Fix NULL vs IS_ERR() check in zynqmp_ipi_mbox_probe()
2020-06-24 17:50:36 +02:00
dm: fix bio splitting and its bio completion order for regular IO
2020-10-01 13:18:25 +02:00
media: ti-vpe: Fix a missing check and reference count leak
2020-10-29 09:57:34 +01:00
memstick: Skip allocating card when removing host
2020-10-07 08:01:25 +02:00
scsi: mptscsih: Fix read sense data size
2020-07-16 08:16:36 +02:00
mfd: mfd-core: Protect against NULL call-back function pointer
2020-10-01 13:17:17 +02:00
VMCI: check return value of get_user_pages_fast() for errors
2020-10-29 09:57:37 +01:00
mmc: core: don't set limits.discard_granularity as 0
2020-10-14 10:33:05 +02:00
ubi: fastmap: Free unused fastmap anchor peb during detach
2020-10-01 13:18:11 +02:00
mwifiex: Do not use GFP_KERNEL in atomic context
2020-10-29 09:57:36 +01:00
NFC: st95hf: Fix memleak in st95hf_in_send_cmd
2020-09-17 13:47:45 +02:00
NTB: perf: Fix race condition when run with ntb_test
2020-06-24 17:50:41 +02:00
libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr
2020-08-21 13:05:35 +02:00
nvme-pci: disable the write zeros command for Intel 600P/P3100
2020-10-29 09:57:25 +01:00
nvmem: qfprom: remove incorrect write support
2020-06-10 20:24:57 +02:00
of: of_mdio: Correct loop scanning logic
2020-07-22 09:32:55 +02:00
opp: Increase parsed_static_opps in _of_add_opp_table_v1()
2020-10-01 13:18:11 +02:00
parisc: mask out enable and reserved bits from sba imask
2020-08-19 08:16:26 +02:00
PCI: tegra: Fix runtime PM imbalance on error
2020-10-01 13:18:07 +02:00
drivers/perf: thunderx2_pmu: Fix memory resource error handling
2020-10-29 09:57:30 +01:00
phy: ti: am654: Fix a leak in serdes_am654_probe()
2020-10-07 08:01:28 +02:00
pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB
2020-10-29 09:57:34 +01:00
platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP
2020-10-14 10:33:03 +02:00
power: supply: max17040: Correct voltage reading
2020-10-01 13:17:59 +02:00
pwm: lpss: Add range limit check for the base_unit register value
2020-10-29 09:57:38 +01:00
rapidio: avoid data race between file operation callbacks and mport_cdev_add().
2020-10-01 13:18:08 +02:00
regulator: resolve supply after creating regulator
2020-10-29 09:57:34 +01:00
remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load
2020-08-21 13:05:29 +02:00
rtc: ds1374: fix possible race condition
2020-10-01 13:17:43 +02:00
s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
2020-10-01 13:18:24 +02:00
scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
2020-10-29 09:57:37 +01:00
slimbus: core: Fix mismatch in of_node_get/put
2020-07-22 09:33:08 +02:00
soc: qcom: rpmh-rsc: Set suppress_bind_attrs flag
2020-08-19 08:15:59 +02:00
soundwire: bus: disable pm_runtime in sdw_slave_delete
2020-10-01 13:17:36 +02:00
spi: spi-s3c64xx: Check return values
2020-10-29 09:57:34 +01:00
staging: emxx_udc: Fix passing of NULL to dma_alloc_coherent()
2020-10-29 09:57:37 +01:00
scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem
2020-09-17 13:47:53 +02:00
thermal: rcar_thermal: Handle probe error gracefully
2020-10-01 13:17:44 +02:00
pty: do tty_flip_buffer_push without port->lock in pty_write
2020-10-29 09:57:38 +01:00
uio_pdrv_genirq: fix use without device tree and no interrupt
2020-07-22 09:33:13 +02:00
USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters
2020-10-17 10:11:23 +02:00
vfio/pci: fix racy on error and request eventfd ctx
2020-10-01 13:18:10 +02:00
vhost: Use vhost_get_used_size() in vhost_vring_set_addr()
2020-10-14 10:32:58 +02:00
video: fbdev: radeon: Fix memleak in radeonfb_pci_register
2020-10-29 09:57:38 +01:00
drivers/virt/fsl_hypervisor: Fix error handling path
2020-10-29 09:57:38 +01:00
virtio_ring: Avoid loop when vq is broken in virtqueue_poll
2020-08-26 10:40:57 +02:00
w1: omap-hdq: cleanup to add missing newline for some dev_dbg
2020-06-22 09:31:26 +02:00
watchdog: initialize device before misc_register
2020-08-21 13:05:36 +02:00
xen/events: don't use chip_data for legacy IRQs
2020-10-17 10:11:24 +02:00
02bf8fbfb4