iMX/i2som-imx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.14.97
i2som-imx-linux/net
History
Oliver Hartkopp e7126858fc can: bcm: check timer values before ktime conversion 
commit 93171ba6f1 upstream.

Kyungtae Kim detected a potential integer overflow in bcm_[rx|tx]_setup()
when the conversion into ktime multiplies the given value with NSEC_PER_USEC
(1000).

Reference: https://marc.info/?l=linux-can&m=154732118819828&w=2

Add a check for the given tv_usec, so that the value stays below one second.
Additionally limit the tv_sec value to a reasonable value for CAN related
use-cases of 400 days and ensure all values to be positive.

Reported-by: Kyungtae Kim <kt0755@gmail.com>
Tested-by: Oliver Hartkopp <socketcan@hartkopp.net>
Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
Cc: linux-stable <stable@vger.kernel.org> # >= 2.6.26
Tested-by: Kyungtae Kim <kt0755@gmail.com>
Acked-by: Andre Naujoks <nautsch2@gmail.com>
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-01-31 08:13:46 +01:00
..
6lowpan
6lowpan: iphc: reset mac_header after decompress to fix panic
2018-10-03 17:00:47 -07:00
9p
9p/net: put a lower bound on msize
2019-01-13 10:01:06 +01:00
802
…
8021q
…
appletalk
…
atm
…
ax25
ax25: fix a use-after-free in ax25_fillin_cb()
2019-01-09 17:14:43 +01:00
batman-adv
batman-adv: Expand merged fragment buffer for full packet
2018-12-13 09:18:46 +01:00
bluetooth
Bluetooth: SMP: fix crash in unpairing
2018-11-04 14:52:39 +01:00
bpf
…
bridge
net: Fix usage of pskb_trim_rcsum
2019-01-31 08:13:41 +01:00
caif
net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
2018-09-05 09:26:27 +02:00
can
can: bcm: check timer values before ktime conversion
2019-01-31 08:13:46 +01:00
ceph
libceph: check authorizer reply/challenge length before reading
2018-12-05 19:41:27 +01:00
core
net: call sk_dst_reset when set SO_DONTROUTE
2019-01-26 09:37:03 +01:00
dcb
net: dcb: For wild-card lookups, use priority -1, not 0
2018-09-19 22:43:43 +02:00
dccp
inet: make sure to grab rcu_read_lock before using ireq->ireq_opt
2018-10-18 09:16:21 +02:00
decnet
…
dns_resolver
…
dsa
…
ethernet
…
hsr
…
ieee802154
ieee802154: lowpan_header_create check must check daddr
2019-01-09 17:14:43 +01:00
ife
…
ipv4
ipfrag: really prevent allocation on netns exit
2019-01-31 08:13:42 +01:00
ipv6
ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
2019-01-26 09:37:00 +01:00
ipx
…
iucv
…
kcm
…
key
…
l2tp
l2tp: remove configurable payload offset
2018-11-04 14:52:43 +01:00
l3mdev
…
lapb
…
llc
llc: do not use sk_eat_skb()
2018-12-01 09:42:51 +01:00
mac80211
mac80211: free skb fraglist before freeing the skb
2019-01-13 10:01:01 +01:00
mac802154
net: mac802154: tx: expand tailroom if necessary
2018-09-09 19:55:52 +02:00
mpls
…
ncsi
…
netfilter
netfilter: nat: can't use dst_hold on noref dst
2019-01-13 10:00:58 +01:00
netlabel
netlabel: check for IPV4MASK in addrinfo_get
2018-10-18 09:16:18 +02:00
netlink
…
netrom
netrom: fix locking in nr_find_socket()
2019-01-09 17:14:44 +01:00
nfc
NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
2018-09-29 03:06:01 -07:00
nsh
…
openvswitch
openvswitch: Avoid OOB read when parsing flow nlattrs
2019-01-31 08:13:41 +01:00
packet
packet: Do not leak dev refcounts on error exit
2019-01-23 08:09:47 +01:00
phonet
…
psample
…
qrtr
…
rds
rds: rds_ib_recv_alloc_cache() should call alloc_percpu_gfp() instead
2018-10-13 09:27:29 +02:00
rfkill
…
rose
…
rxrpc
rxrpc: Fix connection-level abort handling
2018-11-04 14:52:46 +01:00
sched
net_sched: refetch skb protocol for each filter
2019-01-31 08:13:41 +01:00
sctp
sctp: allocate sctp_sockaddr_entry with kzalloc
2019-01-23 08:09:50 +01:00
smc
net/smc: fix TCP fallback socket release
2019-01-09 17:14:46 +01:00
strparser
…
sunrpc
sunrpc: handle ENOMEM in rpcb_getport_async
2019-01-23 08:09:50 +01:00
switchdev
…
tipc
tipc: fix uninit-value in tipc_nl_compat_doit
2019-01-23 08:09:51 +01:00
tls
net/tls: Fixed return value when tls_complete_pending_work() fails
2018-12-05 19:41:11 +01:00
unix
…
vmw_vsock
VSOCK: Send reset control packet when socket is partially bound
2019-01-09 17:14:45 +01:00
wimax
…
wireless
cfg80211: fix use-after-free in reg_process_hint()
2018-11-04 14:52:40 +01:00
x25
…
xfrm
xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears the dst_entry.
2019-01-13 10:00:57 +01:00
compat.c
sock: Make sock->sk_stamp thread-safe
2019-01-09 17:14:46 +01:00
Kconfig
…
Makefile
…
socket.c
net: socket: fix a missing-check bug
2018-11-04 14:52:49 +01:00
sysctl_net.c
…