linux/drivers/staging
Dan Carpenter 4c41aa24ba staging: ncpfs: memory corruption in ncp_read_kernel()
If the server is malicious then *bytes_read could be larger than the
size of the "target" buffer.  It would lead to memory corruption when we
do the memcpy().

Reported-by: Dr Silvio Cesare of InfoSect <Silvio Cesare <silvio.cesare@gmail.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-03-19 16:31:39 +01:00
..
android staging: android: ashmem: Fix possible deadlock in ashmem_ioctl 2018-03-06 07:21:10 -08:00
board
ccree
clocking-wizard
comedi staging: comedi: fix comedi_nsamples_left. 2018-03-06 07:21:10 -08:00
dgnc
emxx_udc
fbtft
fsl-dpaa2
fsl-mc Staging/IIO fixes for 4.16-rc2 2018-02-22 12:05:43 -08:00
fwserial vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
gdm724x
goldfish
greybus vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
gs_fpgaboot
iio
ipx
irda vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
ks7010
lustre
media vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
most vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
mt29f_spinand
ncpfs staging: ncpfs: memory corruption in ncp_read_kernel() 2018-03-19 16:31:39 +01:00
netlogic
nvec
octeon
octeon-usb
olpc_dcon
pi433
rtl8188eu
rtl8192e Staging: rtl8192e: kconfig: Remove blank help text 2018-02-02 23:53:10 +09:00
rtl8192u Staging: rtl8192u: kconfig: Remove blank help text 2018-02-02 23:53:10 +09:00
rtl8712
rtl8723bs
rtlwifi
rts5208
skein
sm750fb
speakup vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
typec
unisys
vboxvideo
vc04_services
vme
vt6655
vt6656
wilc1000
wlan-ng
xgifb
Kconfig
Makefile