Ursula Braun 9dc2f26742 qeth: avoid buffer overflow in snmp ioctl ... commit 6fb392b1a63ae36c31f62bc3fc8630b49d602b62 upstream. Check user-defined length in snmp ioctl request and allow request only if it fits into a qeth command buffer. Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com> Signed-off-by: Frank Blaschka <frank.blaschka@de.ibm.com> Reviewed-by: Heiko Carstens <heicars2@linux.vnet.ibm.com> Reported-by: Nico Golde <nico@ngolde.de> Reported-by: Fabian Yamaguchi <fabs@goesec.de> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2013-12-04 10:56:37 -08:00
..
accessibility
acpi	ACPI / hotplug: Do not execute "insert in progress" _OST	2013-11-29 11:11:43 -08:00
amba
ata	ahci: add Marvell 9230 to the AHCI PCI device list	2013-12-04 10:56:13 -08:00
atm
auxdisplay
base	driver core : Fix use after free of dev->parent in device_shutdown	2013-10-05 07:13:11 -07:00
bcma
block	xen/blkback: fix reference counting	2013-12-04 10:56:25 -08:00
bluetooth	Bluetooth: Add support for BCM20702A0 [0b05, 17cb]	2013-10-13 16:08:32 -07:00
bus
cdrom	drivers/cdrom/cdrom.c: use kzalloc() for failing hardware	2013-07-13 11:42:26 -07:00
char	random: run random_int_secret_init() run after all late_initcalls	2013-10-18 07:45:44 -07:00
clk	clk: fixup argument order when setting VCO parameters	2013-11-13 12:05:33 +09:00
clocksource	clocksource: dw_apb: Fix error check	2013-07-25 14:07:29 -07:00
connector	connector: use nlmsg_len() to check message length	2013-11-04 04:31:02 -08:00
cpufreq	cpufreq / intel_pstate: Fix max_perf_pct on resume	2013-11-13 12:05:30 +09:00
cpuidle	cpuidle: coupled: fix race condition between pokes and safe state	2013-09-26 17:18:02 -07:00
crypto	crypto: caam - Fixed the memory out of bound overwrite issue	2013-08-04 16:50:57 +08:00
dca
devfreq
dio
dma	dmaengine: imx-dma: fix slow path issue in prep_dma_cyclic	2013-10-13 16:08:34 -07:00
edac	amd64_edac: Fix single-channel setups	2013-09-26 17:18:28 -07:00
eisa
extcon
firewire	firewire: fix libdc1394/FlyCap2 iso event regression	2013-08-04 16:50:38 +08:00
firmware	dmi: add support for exact DMI matches in addition to substring matching	2013-11-29 11:11:53 -08:00
gpio	gpio: rcar: NULL dereference on error in probe()	2013-12-04 10:55:51 -08:00
gpu	drm/i915: No LVDS hardware on Intel D410PT and D425KT	2013-11-29 11:11:54 -08:00
hid	HID: uhid: allocate static minor	2013-10-13 16:08:35 -07:00
hsi
hv	Drivers: hv: balloon: Do not post pressure status if interrupted	2013-08-04 16:50:58 +08:00
hwmon	hwmon: (lm90) Fix max6696 alarm handling	2013-11-29 11:11:50 -08:00
hwspinlock
i2c	i2c: mux: gpio: use gpio_set_value_cansleep()	2013-12-04 10:55:50 -08:00
ide
idle	sched, idle: Fix the idle polling state logic	2013-11-29 11:11:42 -08:00
iio	iio: inkern: fix iio_convert_raw_to_processed_unlocked	2013-07-25 14:07:23 -07:00
infiniband	IB/srp: Report receive errors correctly	2013-12-04 10:56:17 -08:00
input	HID: Correct the USB IDs for the new Macbook Air 6	2013-09-26 17:18:15 -07:00
iommu	intel-iommu: Fix leaks in pagetable freeing	2013-09-26 17:18:27 -07:00
ipack
irqchip	ARM: SoC fixes for 3.10-rc	2013-06-22 09:44:45 -10:00
isdn
leds	leds: wm831x-status: Request a REG resource	2013-09-26 17:18:27 -07:00
lguest
macintosh	powerpc/windfarm: Fix noisy slots-fan on Xserve (rm31)	2013-08-11 18:35:20 -07:00
mailbox
md	md: Fix skipping recovery for read-only arrays.	2013-11-13 12:05:32 +09:00
media	media: sh_vou: almost forever loop in sh_vou_try_fmt_vid_out()	2013-11-20 12:27:48 -08:00
memory
memstick
message
mfd	mfd: tps6586x: correct device name of the regulator cell	2013-06-24 12:37:47 +01:00
misc	mei: nfc: fix memory leak in error path	2013-11-29 11:11:52 -08:00
mmc	mmc: tmio_mmc_dma: fix PIO fallback on SDHI	2013-09-26 17:18:29 -07:00
mtd	mtd: gpmi: fix kernel BUG due to racing DMA operations	2013-12-04 10:56:23 -08:00
net	rtlwifi: rtl8192cu: Fix incorrect signal strength for unassociated AP	2013-12-04 10:56:36 -08:00
nfc
ntb	NTB: Correct debugfs to work with more than 1 NTB Device	2013-11-13 12:05:35 +09:00
nubus
of	of: Fix missing memory initialization on FDT unflattening	2013-09-26 17:18:29 -07:00
oprofile
parisc	parisc: Fix interrupt routing for C8000 serial ports	2013-08-11 18:35:21 -07:00
parport
pci	PCI: Support PCIe Capability Slot registers only for ports with slots	2013-11-29 11:11:42 -08:00
pcmcia	pcmcia: at91_cf: fix gpio_get_value in at91_cf_get_status	2013-07-21 18:21:25 -07:00
pinctrl	pinctrl: dove: unset twsi option3 for gconfig as well	2013-12-04 10:55:49 -08:00
platform	drivers/platform/olpc/olpc-ec.c: initialise earlier	2013-08-29 09:47:38 -07:00
pnp
power	charger-manager: Ensure event is not used as format string	2013-07-13 11:42:26 -07:00
pps
ps3
ptp
pwm
rapidio	RAPIDIO: IDT_GEN2: Fix build error.	2013-07-28 16:30:07 -07:00
regulator	mfd: tps6586x: correct device name of the regulator cell	2013-06-24 12:37:47 +01:00
remoteproc
reset
rpmsg
rtc	drivers/rtc/rtc-max77686.c: Fix wrong register	2013-09-14 06:54:57 -07:00
s390	qeth: avoid buffer overflow in snmp ioctl	2013-12-04 10:56:37 -08:00
sbus
scsi	aacraid: prevent invalid pointer dereference	2013-11-29 11:11:40 -08:00
sfi
sh
sn
spi	spi: spi-davinci: Fix direction in dma_map_single()	2013-08-11 18:35:25 -07:00
ssb
ssbi
staging	staging: vt6656: [BUG] Fix for TX USB resets from vendors driver.	2013-12-04 10:55:47 -08:00
target	iscsi-target: chap auth shouldn't match username with trailing garbage	2013-12-04 10:56:15 -08:00
tc
thermal
tty	serial: vt8500: add missing braces	2013-11-04 04:31:06 -08:00
uio	Fix a few incorrectly checked [io_]remap_pfn_range() calls	2013-11-13 12:05:33 +09:00
usb	usb: hub: Clear Port Reset Change during init/resume	2013-11-29 11:11:52 -08:00
uwb
vfio
vhost	vhost/scsi: Fix incorrect usage of get_user_pages_fast write parameter	2013-11-13 12:05:32 +09:00
video	backlight: atmel-pwm-bl: fix reported brightness	2013-12-04 10:55:47 -08:00
virt
virtio	virtio: support unlocked queue poll	2013-07-28 16:29:55 -07:00
vlynq
vme
w1
watchdog	watchdog: ts72xx_wdt: locking bug in ioctl	2013-10-18 07:45:45 -07:00
xen	xen-gnt: prevent adding duplicate gnt callbacks	2013-09-26 17:18:02 -07:00
zorro
Kconfig
Makefile