mirror of
https://github.com/S3NEO/android_kernel_samsung_msm8226.git
synced 2024-11-07 03:47:13 +00:00
be3729421c
Check if the handle data type received from userspace is valid for app loaded query request to avoid the offset boundary check for qseecom_send_modfd_resp is bypassed. Bug: 143972932 Change-Id: I5f3611a8f830d6904213781c5ba70cfc0ba3e2e0 Signed-off-by: Zhen Kong <zkong@codeaurora.org> CVE-2019-14041 Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org> |
||
---|---|---|
.. | ||
altera-stapl | ||
c2port | ||
carma | ||
cb710 | ||
dualwave | ||
eeprom | ||
ibmasm | ||
iwmc3200top | ||
lis3lv02d | ||
modem_if | ||
sgi-gru | ||
sgi-xp | ||
ti-st | ||
ab8500-pwm.c | ||
ad525x_dpot-i2c.c | ||
ad525x_dpot-spi.c | ||
ad525x_dpot.c | ||
ad525x_dpot.h | ||
akm8975.c | ||
apds990x.c | ||
apds9802als.c | ||
arm-charlcd.c | ||
atmel-ssc.c | ||
atmel_pwm.c | ||
atmel_tclib.c | ||
bcm2079x-i2c.c | ||
bh1770glc.c | ||
bh1780gli.c | ||
bmp085.c | ||
ci-bridge-spi.c | ||
cs5535-mfgpt.c | ||
ds1682.c | ||
enclosure.c | ||
ep93xx_pwm.c | ||
fsa9480.c | ||
fsa9485.c | ||
hmc6352.c | ||
hpilo.c | ||
hpilo.h | ||
ice40xx.c | ||
ics932s401.c | ||
ioc4.c | ||
isa1200.c | ||
isl29003.c | ||
isl29020.c | ||
Kconfig | ||
kgdbts.c | ||
lkdtm.c | ||
Makefile | ||
max8997-muic.c | ||
max77803-muic.c | ||
max77804k-muic.c | ||
max77828-muic.c | ||
max77888-muic.c | ||
msm_migrate_pages.c | ||
pch_phub.c | ||
phantom.c | ||
pm8xxx-nfc.c | ||
pm8xxx-upl.c | ||
pm8xxx-vibrator.c | ||
pmic8058-pwm.c | ||
pmic8058-xoadc.c | ||
pn547.c | ||
pti.c | ||
qfp_fuse.c | ||
qpnp-misc.c | ||
qseecom.c | ||
qseecom_kernel.h | ||
qseecom_legacy.h | ||
rt8973.c | ||
sec_jack.c | ||
sec_misc.c | ||
sec_nfc.c | ||
sec_param.c | ||
sim_slot.c | ||
sim_slot.h | ||
sm5502.c | ||
sm5504.c | ||
smsc_hub.c | ||
spear13xx_pcie_gadget.c | ||
ti_dac7512.c | ||
ti_drv2667.c | ||
tifm_7xx1.c | ||
tifm_core.c | ||
tima_debug_log.c | ||
tsif.c | ||
tsif_chrdev.c | ||
tsl2550.c | ||
tspp.c | ||
tsu6721.c | ||
tzic.c | ||
uid_cputime.c | ||
uid_stat.c | ||
vmw_balloon.c | ||
wl127x-rfkill.c |