android_kernel_samsung_univ.../drivers/misc/ibmasm
Jann Horn ba20e67aee ibmasm: don't write out of bounds in read handler
commit a0341fc1981a950c1e902ab901e98f60e0e243f3 upstream.

This read handler had a lot of custom logic and wrote outside the bounds of
the provided buffer. This could lead to kernel and userspace memory
corruption. Just use simple_read_from_buffer() with a stack buffer.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-07-17 11:31:42 +02:00
..
command.c
dot_command.c
dot_command.h
event.c
heartbeat.c
i2o.h
ibmasm.h
ibmasmfs.c
lowlevel.c
lowlevel.h
Makefile
module.c
r_heartbeat.c
remote.c
remote.h
uart.c