Nachiket Kukade 81c61e122f qcacld-2.0: Add a NULL check on channels in IOCTL SETROAMSCANCHANNELS ... qcacld-3.0 to qcacld-2.0 propagation User sends driver a list of roaming scan channels to set through IOCTL SETROAMSCANCHANNELS. The parameters include the number of elements in the array, followed by channel array and then a NULL character. But when driver loops through the channel array it doesn't have a NULL check. An erroneous number of elements passed by user may cause buffer overread. Add a NULL check on channels passed in IOCTL SETROAMSCANCHANNELS. Change-Id: I7342aa5cf8e5267b7ed06a4e35b1ed882fb97893 CRs-Fixed: 2257064		2019-07-27 21:51:33 +02:00
..
accessibility	…
acpi	ACPI: APEI / ERST: Fix missing error handling in erst_reader()	2019-07-27 21:46:19 +02:00
amba	…
android	FROMLIST: binder: fix proc->files use-after-free	2019-07-27 21:51:21 +02:00
ata	libata: array underflow in ata_find_dev()	2019-07-27 21:44:15 +02:00
atm	…
auxdisplay	…
base	power: align wakeup_sources format	2019-07-27 21:47:56 +02:00
battery	Import T813XXS2BRC2 kernel source changes	2018-05-26 00:39:42 +02:00
battery_v2	…
bcma	…
bif	…
block	loop: remember whether sysfs_create_group() was done	2019-07-27 21:50:24 +02:00
bluetooth	Merge tag 'LA.BR.1.3.6-05410-8976.0' of https://source.codeaurora.org/quic/la/kernel/msm-3.10 into HEAD	2018-02-06 13:11:45 +01:00
bus	…
cdrom	…
char	diag: Protect the decrement of number of diag clients	2019-07-27 21:50:47 +02:00
clk	clk: qcom: mdss: initialise spread freq variable before usage	2019-07-27 21:51:05 +02:00
clocksource	Merge tag 'LA.BR.1.3.6-05410-8976.0' of https://source.codeaurora.org/quic/la/kernel/msm-3.10 into HEAD	2018-02-06 13:11:45 +01:00
connector	…
coresight	coresight: tmc: Fix use after free issue with tmc read	2017-07-30 10:34:00 -07:00
cpufreq	cpufreq: interactive governor drops bits in time calculation	2019-07-27 21:50:42 +02:00
cpuidle	cpuidle: Remove unnecessary WARN for calculate_residency	2019-07-27 21:45:56 +02:00
crypto	crypto: hash - annotate algorithms taking optional key	2019-07-27 21:49:17 +02:00
dca	…
debug	…
debug_32	…
devfreq	dev_freq: devfreq_spdm: add null terminator to prevent OOB access	2019-07-27 21:50:47 +02:00
dio	…
dma	…
edac	…
eisa	…
esoc	…
extcon	…
fingerprint	…
firewire	…
firmware	…
gpio	gpio: Handle EPROBE_DEFER while probing	2019-07-27 21:45:55 +02:00
gpu	msm: kgsl: Properly remove ref count on gpuobj_sync failure	2019-07-27 21:49:28 +02:00
hid	HID: debug: check length before copy_to_user()	2019-07-27 21:51:21 +02:00
hsi	…
hv	…
hwmon	…
hwspinlock	…
i2c	i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA	2019-07-27 21:46:30 +02:00
ide	UPSTREAM: block: disable entropy contributions for nonrot devices	2019-07-27 21:47:56 +02:00
idle	…
iio	iio: adis_lib: Initialize trigger before requesting interrupt	2019-07-27 21:46:10 +02:00
infiniband	…
input	BACKPORT: Input: xpad - fix oops when attaching an unknown Xbox One gamepad	2019-07-27 21:50:43 +02:00
iommu	iommu/amd: Finish TLB flush in amd_iommu_unmap()	2019-07-27 21:44:19 +02:00
ipack	…
irqchip	…
isdn	…
leds	…
lguest	…
macintosh	…
mailbox	…
md	md: dm-req-crypt: fixed error propagation when ICE is used	2019-07-27 21:50:38 +02:00
media	msm: vidc: pm qos stability fixes for video driver.	2019-07-27 21:51:13 +02:00
memory	…
memstick	…
message	…
mfd	mfd: omap-usb-tll: Fix inverted bit use for USB TLL mode	2019-07-27 21:44:34 +02:00
misc	qseecom: Fix typo in format specifier	2019-07-27 21:44:44 +02:00
mmc	mmc: cmdq-hci: Change unnecessary pr_err logs to pr_debug	2019-07-27 21:50:45 +02:00
motor	…
mtd	UPSTREAM: block: disable entropy contributions for nonrot devices	2019-07-27 21:47:56 +02:00
muic	Import T813XXS2BRC2 kernel source changes	2018-05-26 00:39:42 +02:00
net	qcacld-2.0: Add a NULL check on channels in IOCTL SETROAMSCANCHANNELS	2019-07-27 21:51:33 +02:00
nfc	…
ntb	…
nubus	…
of	of: fdt: add missing allocation-failure check	2019-07-27 21:44:47 +02:00
oprofile	…
parisc	…
parport	…
pci	PCI / PM: Force devices to D0 in pci_pm_thaw_noirq()	2019-07-27 21:46:19 +02:00
pcmcia	…
phy	…
pinctrl	pinctrl: Really force states during suspend/resume	2019-07-27 21:49:40 +02:00
platform	msm: ipa: Fix to handle NULL pointer dereference	2019-07-27 21:51:22 +02:00
pnp	…
power	drivers: qcom: lpm-stats: Fix undefined access error	2019-07-27 21:50:48 +02:00
pps	…
ps3	…
ptp	…
pwm	…
rapidio	…
regulator	…
remoteproc	…
reset	…
rpmsg	…
rtc	rtc: set the alarm to the next expiring timer	2019-07-27 21:46:00 +02:00
s390	UPSTREAM: block: disable entropy contributions for nonrot devices	2019-07-27 21:47:56 +02:00
sbus	…
scsi	UPSTREAM: scsi: sg: don't return bogus Sg_requests	2019-07-27 21:50:03 +02:00
sensorhub	Import T713XXU2BQD3 kernel source changes	2017-07-01 12:51:07 +02:00
sensors	…
sfi	…
sh	…
slimbus	…
sn	…
soc	voice_svc: Avoid double free in voice_svc driver	2019-07-27 21:51:22 +02:00
soundwire	…
spi	…
spmi	…
ssb	…
ssbi	…
staging	UPSTREAM: staging: android: lowmemorykiller: set TIF_MEMDIE before send kill sig	2019-07-27 21:50:43 +02:00
switch	…
target	target: Avoid mappedlun symlink creation during lun shutdown	2019-07-27 21:44:16 +02:00
tc	…
thermal	msm_thermal: Handle defer while probing	2019-07-27 21:45:58 +02:00
tty	tty: make n_tty_read() always abort if hangup is in progress	2019-07-27 21:49:23 +02:00
uio	uio: fix dmem_region_start computation	2019-07-27 21:42:50 +02:00
usb	USB: core: only clean up what we allocated	2019-07-27 21:51:30 +02:00
uwb	…
vfio	…
vhost	…
video	msm: mdss: clear BTA_DONE interrupt during DSI read operations	2019-07-27 21:51:12 +02:00
virt	…
virtio	…
vlynq	…
vme	…
w1	…
watchdog	…
xen	…
zorro	…
Kconfig	msm: gud: Remove gud driver	2017-09-08 18:49:12 +00:00
Makefile	msm: gud: Remove gud driver	2017-09-08 18:49:12 +00:00