a7y18lte-ubports/android_kernel_samsung_a7y18lte
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
4ccecbbc9f
android_kernel_samsung_a7y1.../drivers/ata
History
Kees Cook 4ccecbbc9f libata: zpodd: Fix small read overflow in zpodd_get_mech_type() 
[ Upstream commit 71d6c505b4d9e6f76586350450e785e3d452b346 ]

Jeffrin reported a KASAN issue:

  BUG: KASAN: global-out-of-bounds in ata_exec_internal_sg+0x50f/0xc70
  Read of size 16 at addr ffffffff91f41f80 by task scsi_eh_1/149
  ...
  The buggy address belongs to the variable:
    cdb.48319+0x0/0x40

Much like commit 18c9a99bce2a ("libata: zpodd: small read overflow in
eject_tray()"), this fixes a cdb[] buffer length, this time in
zpodd_get_mech_type():

We read from the cdb[] buffer in ata_exec_internal_sg(). It has to be
ATAPI_CDB_LEN (16) bytes long, but this buffer is only 12 bytes.

Reported-by: Jeffrin Jose T <jeffrin@rajagiritech.edu.in>
Fixes: afe759511808c ("libata: identify and init ZPODD devices")
Link: https://lore.kernel.org/lkml/201907181423.E808958@keescook/
Tested-by: Jeffrin Jose T <jeffrin@rajagiritech.edu.in>
Reviewed-by: Nick Desaulniers <ndesaulniers@google.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-04-06 20:49:00 +02:00
..
acard-ahci.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_brcmstb.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_ceva.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_da850.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_imx.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_mvebu.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_platform.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_qoriq.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_st.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_sunxi.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_tegra.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci_xgene.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ahci.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ata_generic.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ata_piix.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Kconfig A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libahci_platform.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libahci.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libata-acpi.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libata-core.c libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk 2020-04-06 19:02:52 +02:00
libata-eh.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libata-pmp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libata-scsi.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libata-sff.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libata-trace.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libata-transport.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libata-transport.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
libata-zpodd.c libata: zpodd: Fix small read overflow in zpodd_get_mech_type() 2020-04-06 20:49:00 +02:00
libata.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Makefile A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_acpi.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_ali.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_amd.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_arasan_cf.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_artop.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_at32.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_at91.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_atiixp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_atp867x.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_bf54x.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_cmd64x.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_cmd640.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_cs5520.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_cs5530.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_cs5535.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_cs5536.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_cypress.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_efar.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_ep93xx.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_hpt3x2n.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_hpt3x3.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_hpt37x.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_hpt366.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_icside.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_imx.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_isapnp.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_it821x.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_it8213.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_ixp4xx_cf.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_jmicron.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_legacy.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_macio.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_marvell.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_mpc52xx.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_mpiix.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_netcell.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_ninja32.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_ns87410.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_ns87415.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_octeon_cf.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_of_platform.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_oldpiix.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_opti.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_optidma.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_palmld.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_pcmcia.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_pdc202xx_old.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_pdc2027x.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_piccolo.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_platform.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_pxa.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_radisys.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_rb532_cf.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_rdc.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_rz1000.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_samsung_cf.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_sc1200.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_sch.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_serverworks.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_sil680.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_sis.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_sl82c105.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_triflex.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pata_via.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pdc_adma.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_dwc_460ex.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_fsl.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_highbank.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_inic162x.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_mv.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_nv.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_promise.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_promise.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_qstor.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_rcar.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_sil.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_sil24.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_sis.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_svw.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_sx4.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_uli.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_via.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sata_vsc.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sis.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30