Skip to content

GitLab

Switch branch/tag
History Find file
Clone
parisc: isa-eeprom - Fix loff_t usage
Michael Buesch authored 
commit 6b4dbcd8

 upstream.

loff_t is a signed type. If userspace passes a negative ppos, the "count"
range check is weakened. "count"s bigger than HPEE_MAX_LENGTH will pass the check.
Also, if ppos is negative, the readb(eisa_eeprom_addr + *ppos) will poke in random
memory.
Signed-off-by: default avatarMichael Buesch <mb@bu3sch.de>
Signed-off-by: default avatarHelge Deller <deller@gmx.de>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@suse.de>
678af37c
Name Last commit Last update
..
Kconfig iommu: parisc: make the IOMMUs respect the segment boundary limits
Makefile Linux-2.6.12-rc2
README.dino Linux-2.6.12-rc2
asp.c parisc: drivers: fix warnings
ccio-dma.c parisc: drivers: fix warnings
ccio-rm-dma.c [PARISC] Convert parisc_device to use struct resource for hpa
dino.c parisc: drivers: fix warnings
eisa.c parisc: drivers: fix warnings
eisa_eeprom.c parisc: isa-eeprom - Fix loff_t usage
eisa_enumerator.c parisc: drivers: fix warnings
gsc.c parisc: remove klist iterators
gsc.h IRQ: Maintain regs pointer globally rather than passing to IRQ handlers
hppb.c parisc: drivers/parisc/: make code static
iommu-helpers.h iommu: parisc: pass struct device to iommu_alloc_range
iosapic.c parisc: iosapic: fix build breakage
iosapic_private.h [PARISC] sparse fixes
lasi.c parisc: drivers/parisc/: make code static
lba_pci.c parisc: fix wrong assumption about bus->self
led.c parisc: led: remove proc_dir_entry::owner
pdc_stable.c [PARISC] pdc_stable: fix compile errors
power.c [PARISC] Build fixes for power.c
sba_iommu.c parisc: sba_iommu: fix build bug when CONFIG_PARISC_AGP=y
superio.c parport: Fix various uses of parport_pc
wax.c parisc: drivers/parisc/: make code static