Xie Yongji b5fba782cc virtio_console: Assure used length from device is limited ...

[ Upstream commit d00d8da5869a2608e97cfede094dfc5e11462a46 ]

The buf->len might come from an untrusted device. This
ensures the value would not exceed the size of the buffer
to avoid data corruption or loss.

Signed-off-by: Xie Yongji <xieyongji@bytedance.com>
Acked-by: Jason Wang <jasowang@redhat.com>
Link: https://lore.kernel.org/r/20210525125622.1203-1-xieyongji@bytedance.com
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-07-20 16:16:12 +02:00

..

agp

parisc: parisc-agp requires SBA IOMMU driver

2021-04-14 08:22:32 +02:00

hw_random

hwrng: timeriomem - Fix cooldown period calculation

2021-03-04 09:39:41 +01:00

ipmi

ipmi/watchdog: Stop watchdog timer when the current action is 'none'

2021-07-20 16:16:05 +02:00

mwave

char/mwave: fix potential Spectre v1 vulnerability

2019-01-31 08:14:36 +01:00

pcmcia

char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()

2021-07-20 16:15:55 +02:00

tpm

tpm: fix error return code in tpm2_get_cc_attrs_tbl()

2021-05-22 10:59:39 +02:00

xilinx_hwicap

…

xillybus

PCI: Add Altera vendor ID

2018-03-14 19:13:47 +01:00

adi.c

char: sparc64: Add privileged ADI driver

2018-06-05 11:24:55 -07:00

apm-emulation.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

applicom.c

applicom: Fix potential Spectre v1 vulnerabilities

2019-03-10 07:17:20 +01:00

applicom.h

…

bsr.c

…

ds1620.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

dsp56k.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

dtlk.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

efirtc.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

generic_nvram.c

…

hangcheck-timer.c

treewide: Switch DEFINE_TIMER callbacks to struct timer_list *

2017-11-21 15:57:05 -08:00

hpet.c

char: hpet: add checks after calling ioremap

2021-06-03 08:38:09 +02:00

Kconfig

tty: mark Siemens R3964 line discipline as BROKEN

2019-04-17 08:38:47 +02:00

lp.c

lp: fix sparc64 LPSETTIMEOUT ioctl

2019-12-13 08:50:58 +01:00

Makefile

char: sparc64: Add privileged ADI driver

2018-06-05 11:24:55 -07:00

mbcs.c

…

mbcs.h

…

mem.c

/dev/mem: Bail out upon SIGKILL.

2019-10-05 13:10:11 +02:00

misc.c

proc: introduce proc_create_seq{,_data}

2018-05-16 07:23:35 +02:00

mspec.c

char: mspec: change return type to vm_fault_t

2018-04-23 13:51:53 +02:00

nsc_gpio.c

…

nvram.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

nwbutton.c

treewide: Switch DEFINE_TIMER callbacks to struct timer_list *

2017-11-21 15:57:05 -08:00

nwbutton.h

treewide: Switch DEFINE_TIMER callbacks to struct timer_list *

2017-11-21 15:57:05 -08:00

nwflash.c

…

pc8736x_gpio.c

…

powernv-op-panel.c

…

ppdev.c

ppdev: fix PPGETTIME/PPSETTIME ioctls

2019-12-17 20:35:13 +01:00

ps3flash.c

…

random.c

random: fix the RNDRESEEDCRNG ioctl

2021-03-04 09:39:31 +01:00

raw.c

treewide: Use array_size() in vzalloc()

2018-06-12 16:19:22 -07:00

rtc.c

char: rtc: remove task handling

2018-08-02 17:16:03 +02:00

scx200_gpio.c

…

snsc_event.c

…

snsc.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

snsc.h

…

sonypi.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

tb0219.c

…

tlclk.c

drivers: char: tlclk.c: Avoid data race between init and interrupt handler

2020-10-01 13:14:42 +02:00

toshiba.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

ttyprintk.c

ttyprintk: Add TTY hangup callback.

2021-05-22 10:59:32 +02:00

uv_mmtimer.c

…

virtio_console.c

virtio_console: Assure used length from device is limited

2021-07-20 16:16:12 +02:00