openstlinux/linux-st
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
a07cf4fd610ed4adab2eb86c56ddfed8a287c45b
linux-st/drivers
History
Harshit Mogalapalli 60b2027077 ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() 
[ Upstream commit 748b2f5e82d17480404b3e2895388fc2925f7caf ]

mac_len is of type unsigned, which can never be less than zero.

	mac_len = ieee802154_hdr_peek_addrs(skb, &header);
	if (mac_len < 0)
		return mac_len;

Change this to type int as ieee802154_hdr_peek_addrs() can return negative
integers, this is found by static analysis with smatch.

Fixes: 6c993779ea1d ("ca8210: fix mac_len negative array access")
Signed-off-by: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com>
Acked-by: Alexander Aring <aahringo@redhat.com>
Reviewed-by: Simon Horman <simon.horman@corigine.com>
Link: https://lore.kernel.org/r/20230306191824.4115839-1-harshit.m.mogalapalli@oracle.com
Signed-off-by: Stefan Schmidt <stefan@datenfreihafen.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-04-06 12:10:42 +02:00
..
accessibility
…
acpi
ACPI: video: Add backlight=native DMI quirk for Dell Vostro 15 3535
2023-04-06 12:10:38 +02:00
amba
…
android
…
ata
…
atm
atm: idt77252: fix kmemleak when rmmod idt77252
2023-03-30 12:49:09 +02:00
auxdisplay
auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()
2023-03-11 13:55:16 +01:00
base
drivers: base: dd: fix memory leak with using debugfs_lookup()
2023-03-11 13:55:39 +01:00
bcma
…
block
block: sunvdc: add check for mdesc_grab() returning NULL
2023-03-22 13:33:47 +01:00
bluetooth
Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work
2023-03-30 12:49:12 +02:00
bus
bus: imx-weim: fix branch condition evaluates to a garbage value
2023-03-30 12:49:29 +02:00
cdrom
…
char
tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address
2023-03-17 08:50:30 +01:00
clk
clk: HI655X: select REGMAP instead of depending on it
2023-03-22 13:33:40 +01:00
clocksource
…
comedi
…
connector
…
counter
…
cpufreq
…
cpuidle
cpuidle: psci: Iterate backwards over list in psci_pd_remove()
2023-03-22 13:34:04 +01:00
crypto
…
cxl
…
dax
…
dca
…
devfreq
…
dio
…
dma
…
dma-buf
…
edac
…
eisa
…
extcon
…
firewire
…
firmware
firmware: arm_scmi: Fix device node validation for mailbox transport
2023-03-30 12:49:29 +02:00
fpga
…
fsi
…
gnss
…
gpio
…
gpu
drm/amdkfd: Fixed kfd_process cleanup on module exit.
2023-04-06 12:10:40 +02:00
greybus
…
hid
HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
2023-03-30 12:49:16 +02:00
hsi
…
hte
…
hv
…
hwmon
hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
2023-03-30 12:49:13 +02:00
hwspinlock
…
hwtracing
…
i2c
i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
2023-03-30 12:49:30 +02:00
i3c
…
idle
…
iio
iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()
2023-03-11 13:55:35 +01:00
infiniband
RDMA/cma: Distinguish between sockaddr_in and sockaddr_in6 by size
2023-03-11 13:55:40 +01:00
input
Input: exc3000 - properly stop timer on shutdown
2023-03-17 08:50:19 +01:00
interconnect
interconnect: qcom: qcm2290: Fix MASTER_SNOC_BIMC_NRT
2023-03-30 12:48:59 +02:00
iommu
iommu: Attach device group to old domain in error path
2023-03-11 13:55:40 +01:00
ipack
…
irqchip
…
isdn
…
leds
…
macintosh
macintosh: windfarm: Use unsigned type for 1-bit bitfields
2023-03-17 08:50:31 +01:00
mailbox
…
mcb
…
md
md: avoid signed overflow in slot_store()
2023-04-06 12:10:39 +02:00
media
media: m5mols: fix off-by-one loop termination error
2023-03-22 13:33:53 +01:00
memory
memory: tegra30-emc: fix interconnect registration race
2023-03-22 13:33:56 +01:00
memstick
…
message
…
mfd
mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
2023-03-11 13:55:32 +01:00
misc
misc: vmw_balloon: fix memory leak with using debugfs_lookup()
2023-03-11 13:55:39 +01:00
mmc
mmc: sdhci_am654: lower power-on failed message severity
2023-03-22 13:34:03 +01:00
most
…
mtd
mtd: nand: mxic-ecc: Fix mxic_ecc_data_xfer_wait_for_completion() when irq is used
2023-04-06 12:10:42 +02:00
mux
…
net
ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()
2023-04-06 12:10:42 +02:00
nfc
nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
2023-03-22 13:33:46 +01:00
ntb
…
nubus
…
nvdimm
…
nvme
nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM620
2023-04-06 12:10:40 +02:00
nvmem
…
of
…
opp
…
parisc
…
parport
…
pci
PCI: s390: Fix use-after-free of PCI resources with per-function hotplug
2023-03-22 13:33:45 +01:00
pcmcia
…
peci
…
perf
…
phy
phy: rockchip-typec: Fix unsigned comparison with less than zero
2023-03-11 13:55:40 +01:00
pinctrl
…
platform
platform/x86: int3472: Add GPIOs to Surface Go 3 Board data
2023-03-30 12:49:19 +02:00
pnp
…
power
power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
2023-03-30 12:49:01 +02:00
powercap
…
pps
…
ps3
…
ptp
ptp: vclock: use mutex to fix "sleep on atomic" bug
2023-03-11 13:55:25 +01:00
pwm
pwm: stm32-lp: fix the check on arr and cmp registers update
2023-03-11 13:55:17 +01:00
rapidio
…
ras
…
regulator
…
remoteproc
remoteproc/mtk_scp: Move clk ops outside send_lock
2023-03-10 09:34:26 +01:00
reset
…
rpmsg
…
rtc
rtc: allow rtc_read_alarm without read_alarm callback
2023-03-11 13:55:30 +01:00
s390
…
sbus
…
scsi
scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
2023-03-30 12:49:21 +02:00
sh
…
siox
…
slimbus
…
soc
soc: qcom: llcc: Fix slice configuration values for SC8280XP
2023-03-30 12:49:29 +02:00
soundwire
soundwire: cadence: Drain the RX FIFO after an IO timeout
2023-03-11 13:55:40 +01:00
spi
spi: intel: Check number of chip selects after reading the descriptor
2023-03-17 08:50:20 +01:00
spmi
…
ssb
…
staging
staging: rtl8723bs: Pass correct parameters to cfg80211_get_bss()
2023-03-17 08:50:16 +01:00
target
scsi: target: iscsi: Fix an error message in iscsi_check_key()
2023-03-30 12:49:17 +02:00
tc
…
tee
tee: amdtee: fix race condition in amdtee_open_session
2023-03-30 12:49:29 +02:00
thermal
thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
2023-03-11 13:55:32 +01:00
thunderbolt
thunderbolt: Limit USB3 bandwidth of certain Intel USB4 host routers
2023-04-06 12:10:33 +02:00
tty
tty: serial: fsl_lpuart: fix race on RX DMA shutdown
2023-04-06 12:10:36 +02:00
ufs
scsi: ufs: core: Add soft dependency on governor_simpleondemand
2023-03-30 12:49:17 +02:00
uio
…
usb
usb: ucsi_acpi: Increase the command completion timeout
2023-03-30 12:49:25 +02:00
vdpa
vp_vdpa: fix the crash in hot unplug with vp_vdpa
2023-03-22 13:34:03 +01:00
vfio
vfio/type1: restore locked_vm
2023-03-10 09:34:32 +01:00
vhost
vhost-vdpa: free iommu domain after last use during cleanup
2023-03-22 13:33:44 +01:00
video
fbdev: au1200fb: Fix potential divide by zero
2023-04-06 12:10:41 +02:00
virt
virt/coco/sev-guest: Add throttling awareness
2023-03-22 13:34:06 +01:00
virtio
…
vlynq
…
w1
…
watchdog
watchdog: sbsa_wdog: Make sure the timeout programming is within the limits
2023-03-11 13:55:24 +01:00
xen
…
zorro
…
Kconfig
…
Makefile
…