Dan Carpenter 0ec4fc584c media: ttusb-dec: buffer overflow in ioctl ...

commit f2e323ec96 upstream.

We need to add a limit check here so we don't overflow the buffer.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-11-21 09:22:54 -08:00

..

accessibility

…

acpi

ACPICA: Update to GPIO region handler interface.

2014-10-05 14:54:11 -07:00

amba

…

ata

ahci: disable MSI instead of NCQ on Samsung pci-e SSDs on macbooks

2014-11-21 09:22:52 -08:00

atm

atm: idt77252: fix dev refcnt leak

2013-12-08 07:29:25 -08:00

auxdisplay

…

base

sysfs: driver core: Fix glue dir race condition by gdp_mutex

2014-11-14 08:48:01 -08:00

bcma

…

block

sunvdc: don't call VD_OP_GET_VTOC

2014-11-21 09:22:52 -08:00

bluetooth

Bluetooth: Fix issue with USB suspend in btusb driver

2014-10-30 09:35:12 -07:00

bus

bus: mvebu-mbus: allow several windows with the same target/attribute

2014-06-07 13:25:37 -07:00

cdrom

…

char

random: add and use memzero_explicit() for clearing data

2014-11-14 08:47:55 -08:00

clk

clk: spear3xx: Use proper control register offset

2014-07-17 15:58:02 -07:00

clocksource

clocksource: Exynos_mct: Register clock event after request_irq()

2014-06-07 13:25:29 -07:00

connector

net: Use netlink_ns_capable to verify the permisions of netlink messages

2014-06-26 15:12:37 -04:00

cpufreq

cpufreq: intel_pstate: Fix setting max_perf_pct in performance policy

2014-11-14 08:47:58 -08:00

cpuidle

cpuidle: Check the result of cpuidle_get_driver() against NULL

2014-04-14 06:42:15 -07:00

crypto

crypto: ux500 - make interrupt mode plausible

2014-09-05 16:28:35 -07:00

dca

…

devfreq

…

dio

…

dma

ioat: fix tasklet tear down

2014-03-06 21:30:14 -08:00

edac

cpc925_edac: Report UE events properly

2014-11-14 08:48:00 -08:00

eisa

Revert "EISA: Initialize device before its resources"

2014-02-13 13:47:59 -08:00

extcon

extcon: max77693: Fix two NULL pointer exceptions on missing pdata

2014-07-06 18:54:15 -07:00

firewire

firewire: cdev: prevent kernel stack leaking into ioctl arguments

2014-11-21 09:22:53 -08:00

firmware

firmware: Do not use WARN_ON(!spin_is_locked())

2014-09-17 09:03:57 -07:00

gpio

gpio: mxs: Allow for recursive enable_irq_wake() call

2014-05-13 13:59:45 +02:00

gpu

drm/radeon: add missing crtc unlock when setting up the MC

2014-11-21 09:22:53 -08:00

hid

HID: logitech-dj: prevent false errors to be shown

2014-10-05 14:54:08 -07:00

hsi

…

hv

Drivers: hv: vmbus: Fix a bug in vmbus_open()

2014-10-30 09:35:11 -07:00

hwmon

hwmon: (dme1737) Prevent overflow problem when writing large limits

2014-09-05 16:28:35 -07:00

hwspinlock

…

i2c

i2c: at91: don't account as iowait

2014-11-14 08:48:01 -08:00

ide

…

idle

x86 idle: Repair large-server 50-watt idle-power regression

2014-01-09 12:24:21 -08:00

iio

iio:inkern: fix overwritten -EPROBE_DEFER in of_iio_channel_get_by_name

2014-10-05 14:54:12 -07:00

infiniband

Target/iser: Don't put isert_conn inside disconnected handler

2014-10-05 14:54:12 -07:00

input

Input: alps - allow up to 2 invalid packets without resetting device

2014-11-21 09:22:54 -08:00

iommu

iommu/amd: Fix cleanup_domain for mass device removal

2014-09-17 09:03:57 -07:00

ipack

…

irqchip

irqchip: gic: Fix core ID calculation when topology is read from DT

2014-07-28 08:00:06 -07:00

isdn

isdnloop: several buffer overflows

2014-04-14 06:42:18 -07:00

leds

leds: leds-pwm: properly clean up after probe failure

2014-06-07 13:25:34 -07:00

lguest

x86, flags: Rename X86_EFLAGS_BIT1 to X86_EFLAGS_FIXED

2014-11-14 08:47:54 -08:00

macintosh

…

mailbox

…

md

dm raid: ensure superblock's size matches device's logical block size

2014-11-21 09:22:53 -08:00

media

media: ttusb-dec: buffer overflow in ioctl

2014-11-21 09:22:54 -08:00

memory

…

memstick

…

message

mptfusion: enable no_write_same for vmware scsi disks

2014-10-30 09:35:10 -07:00

mfd

mfd: rtsx_pcr: Fix MSI enable error handling

2014-11-14 08:47:55 -08:00

misc

mei: nfc: fix memory leak in error path

2014-09-05 16:28:36 -07:00

mmc

mmc: rtsx_pci_sdmmc: fix incorrect last byte in R2 response

2014-11-14 08:47:53 -08:00

mtd

UBI: add missing kmem_cache_free() in process_pool_aeb error path

2014-11-14 08:47:55 -08:00

net

macvtap: Fix csum_start when VLAN tags are present

2014-11-21 09:22:53 -08:00

nfc

NFC: microread: Potential overflows in microread_target_discovered()

2014-10-05 14:54:12 -07:00

ntb

NTB: Correct debugfs to work with more than 1 NTB Device

2013-11-13 12:05:35 +09:00

nubus

…

of

of: Fix overflow bug in string property parsing functions

2014-11-14 08:48:01 -08:00

oprofile

…

parisc

…

parport

parport: parport_pc: remove double PCI ID for NetMos

2014-02-06 11:08:15 -08:00

pci

PCI: Generate uppercase hex for modalias interface class

2014-10-30 09:35:12 -07:00

pcmcia

…

pinctrl

pinctrl: protect pinctrl_list add

2014-02-20 11:06:11 -08:00

platform

acer-wmi: Add acpi_backlight=video quirk for the Acer KAV80

2014-11-14 08:48:01 -08:00

pnp

PNP / ACPI: proper handling of ACPI IO/Memory resource parsing failures

2014-03-23 21:38:22 -07:00

power

power: max17040: Fix NULL pointer dereference when there is no platform_data

2014-02-22 12:41:29 -08:00

pps

…

ps3

…

ptp

…

pwm

…

rapidio

rapidio/tsi721_dma: fix failure to obtain transaction descriptor

2014-08-07 14:30:25 -07:00

regulator

regulator: arizona-ldo1: remove bypass functionality

2014-09-17 09:03:57 -07:00

remoteproc

…

reset

…

rpmsg

…

rtc

rtc: rtc-at91rm9200: fix infinite wait for ACKUPD irq

2014-06-26 15:12:37 -04:00

s390

s390/chsc: fix SEI usage on old FW levels

2014-05-13 13:59:42 +02:00

sbus

bbc-i2c: Fix BBC I2C envctrl on SunBlade 2000

2014-08-14 09:24:16 +08:00

scsi

scsi: only re-lock door after EH on devices that were reset

2014-11-21 09:22:53 -08:00

sfi

…

sh

…

sn

…

spi

spi: pxa2xx: toggle clocks on suspend if not disabled by runtime PM

2014-11-14 08:47:59 -08:00

ssb

…

ssbi

…

staging

staging:iio:ade7758: Remove "raw" from channel name

2014-11-14 08:47:58 -08:00

target

target: Fix APTPL metadata handling for dynamic MappedLUNs

2014-11-14 08:47:57 -08:00

tc

…

thermal

…

tty

tty: Fix high cpu load if tty is unreleaseable

2014-11-14 08:48:00 -08:00

uio

Fix a few incorrectly checked [io_]remap_pfn_range() calls

2013-11-13 12:05:33 +09:00

usb

usb: gadget: udc: core: fix kernel oops with soft-connect

2014-11-14 08:48:00 -08:00

uwb

…

vfio

mm: close PageTail race

2014-04-03 12:01:05 -07:00

vhost

vhost: validate vhost_get_vq_desc return value

2014-04-14 06:42:18 -07:00

video

framebuffer: fix border color

2014-11-14 08:47:56 -08:00

virt

…

virtio

virtio_pci: fix virtio spec compliance on restore

2014-11-14 08:47:55 -08:00

vlynq

…

vme

VME: Correct read/write alignment algorithm

2014-02-22 12:41:28 -08:00

w1

w1: fix w1_send_slave dropping a slave id

2014-05-06 07:55:28 -07:00

watchdog

watchdog: ath79_wdt: avoid spurious restarts on AR934x

2014-07-06 18:54:14 -07:00

xen

xen/gnttab: leave lazy MMU mode in the case of a m2p override failure

2013-12-11 22:36:27 -08:00

zorro

…

Kconfig

…

Makefile

…