Xie Yongji 187f14fb88 virtio_console: Assure used length from device is limited ...

[ Upstream commit d00d8da5869a2608e97cfede094dfc5e11462a46 ]

The buf->len might come from an untrusted device. This
ensures the value would not exceed the size of the buffer
to avoid data corruption or loss.

Signed-off-by: Xie Yongji <xieyongji@bytedance.com>
Acked-by: Jason Wang <jasowang@redhat.com>
Link: https://lore.kernel.org/r/20210525125622.1203-1-xieyongji@bytedance.com
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-07-20 16:22:43 +02:00

..

agp

parisc: parisc-agp requires SBA IOMMU driver

2021-04-16 12:00:21 +02:00

hw_random

x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping

2020-06-11 09:21:40 +02:00

ipmi

ipmi/watchdog: Stop watchdog timer when the current action is 'none'

2021-07-20 16:22:39 +02:00

mwave

char/mwave: fix potential Spectre v1 vulnerability

2019-02-06 19:43:04 +01:00

pcmcia

char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()

2021-07-20 16:22:36 +02:00

tpm

tpm: ibmvtpm: Wait for buffer to be set before proceeding

2020-10-01 11:11:53 +02:00

xilinx_hwicap

char:xilinx_hwicap:buffer_icap - change 1/0 to true/false for bool type variable in function buffer_icap_set_configuration().

2015-06-12 16:58:33 -07:00

xillybus

char: xillybus: Allow 64-bit DMA on PCIe interface

2015-08-05 12:27:09 -07:00

apm-emulation.c

…

applicom.c

applicom: Fix potential Spectre v1 vulnerabilities

2019-03-23 08:44:23 +01:00

applicom.h

…

bfin-otp.c

…

bsr.c

…

ds1302.c

…

ds1620.c

…

dsp56k.c

…

dtlk.c

…

efirtc.c

drivers/char: make efirtc.c driver explicitly non-modular

2015-09-20 19:32:35 -07:00

generic_nvram.c

…

genrtc.c

…

hangcheck-timer.c

…

hpet.c

char: hpet: add checks after calling ioremap

2021-06-03 08:22:07 +02:00

Kconfig

tty: mark Siemens R3964 line discipline as BROKEN

2019-04-27 09:33:54 +02:00

lp.c

char: lp: fix possible integer overflow in lp_setup()

2017-05-25 14:30:07 +02:00

Makefile

hwmon: Rename i8k driver to dell-smm-hwmon and move it to hwmon tree

2015-05-24 12:48:12 -07:00

mbcs.c

…

mbcs.h

…

mem.c

/dev/mem: Bail out upon SIGKILL.

2019-10-05 12:27:54 +02:00

misc.c

char: make misc_deregister a void function

2015-08-05 10:35:49 -07:00

mmtimer.c

…

mspec.c

…

nsc_gpio.c

…

nvram.c

char/nvram: Use bitwise OR to obtain Atari video mode data

2015-08-05 13:30:16 -07:00

nwbutton.c

…

nwbutton.h

…

nwflash.c

…

pc8736x_gpio.c

…

ppdev.c

…

ps3flash.c

…

random.c

random32: make prandom_u32() output unpredictable

2020-11-18 18:25:02 +01:00

raw.c

writeback: separate out include/linux/backing-dev-defs.h

2015-06-02 08:33:34 -06:00

rtc.c

…

scx200_gpio.c

…

snsc_event.c

…

snsc.c

drivers/char: make SGI snsc.c driver explicitly non-modular

2015-09-20 19:32:35 -07:00

snsc.h

…

sonypi.c

…

tb0219.c

…

tile-srom.c

fs: move struct kiocb to fs.h

2015-03-25 20:28:11 -04:00

tlclk.c

drivers: char: tlclk.c: Avoid data race between init and interrupt handler

2020-10-01 11:11:54 +02:00

toshiba.c

toshiba laptop: replace ioremap_cache with ioremap

2015-08-05 17:26:00 -07:00

ttyprintk.c

ttyprintk: Add TTY hangup callback.

2021-05-22 10:38:23 +02:00

uv_mmtimer.c

…

virtio_console.c

virtio_console: Assure used length from device is limited

2021-07-20 16:22:43 +02:00