Ning Qiang
fd97e4ad6d
macintosh/adb: fix oob read in do_adb_query() function ...
In do_adb_query() function of drivers/macintosh/adb.c, req->data is copied
form userland. The parameter "req->data[2]" is missing check, the array
size of adb_handler[] is 16, so adb_handler[req->data[2]].original_address and
adb_handler[req->data[2]].handler_id will lead to oob read.
Cc: stable <stable@kernel.org>
Signed-off-by: Ning Qiang <sohu0106@126.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Acked-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/20220713153734.2248-1-sohu0106@126.com
2022-07-20 22:06:30 +10:00
2022-05-20 21:07:05 +02:00
2022-05-30 11:37:26 -07:00
2022-06-03 11:48:47 -07:00
2022-06-05 17:14:03 -07:00
2022-06-22 12:51:49 +10:00
2022-06-03 15:46:03 -07:00
2022-06-04 13:42:53 -07:00
2022-05-13 13:19:01 +02:00
2022-06-03 11:48:47 -07:00
2022-05-15 18:31:28 -06:00
2022-06-12 10:33:38 -07:00
2022-06-03 11:48:47 -07:00
2022-06-05 10:47:06 -07:00
2022-05-19 18:54:45 +02:00
2022-06-02 15:23:54 -07:00
2022-05-23 19:18:51 +02:00
2022-05-31 12:45:09 -04:00
2022-05-20 12:30:53 -07:00
2022-05-16 13:37:59 -07:00
2022-05-19 19:32:19 +02:00
2022-05-19 18:56:51 +02:00
2022-05-29 11:38:27 -07:00
2022-05-25 16:18:27 -07:00
2022-05-23 19:32:59 -07:00
2022-05-13 17:03:41 +09:00
2022-05-23 07:48:27 +02:00
2022-06-03 13:39:30 -07:00
2022-06-10 14:26:15 +02:00
2022-06-10 10:13:24 -07:00
2022-06-03 11:17:49 -07:00
2022-05-20 15:54:41 +02:00
2022-06-03 11:48:47 -07:00
2022-05-22 12:25:55 -07:00
2022-06-22 12:51:49 +10:00
2022-05-17 22:34:42 +02:00
2022-06-08 18:05:45 +02:00
2022-06-04 14:04:27 -07:00
2022-05-26 21:08:40 -07:00
2022-06-07 15:00:29 -07:00
2022-06-03 11:36:34 -07:00
2022-05-31 09:56:54 -07:00
2022-06-03 06:52:57 -07:00
2022-06-02 15:23:54 -07:00
2022-07-20 22:06:30 +10:00
2022-05-24 08:08:24 -05:00
2022-06-10 15:23:54 -04:00
2022-06-03 11:17:49 -07:00
2022-05-30 11:37:26 -07:00
2022-06-02 15:23:54 -07:00
2022-06-22 12:50:56 +10:00
2022-06-07 14:24:30 -07:00
2022-06-03 14:42:24 -07:00
2022-06-22 12:51:49 +10:00
2022-06-08 10:18:10 -07:00
2022-05-27 21:24:19 -07:00
2022-06-05 09:25:12 -07:00
2022-05-25 16:18:27 -07:00
2022-05-25 15:02:26 +02:00
2022-06-03 11:48:47 -07:00
2022-06-02 15:23:54 -07:00
2022-05-23 21:06:11 -07:00
2022-05-19 16:56:17 +02:00
2022-05-28 11:15:54 -07:00
2022-06-12 11:33:42 -07:00
2022-06-03 11:36:34 -07:00
2022-05-23 19:18:51 +02:00
2022-05-25 21:51:32 -07:00
2022-05-20 16:40:01 +02:00
2022-05-25 14:38:29 +02:00
2022-06-03 11:48:47 -07:00
2022-06-02 15:23:54 -07:00
2022-06-03 11:48:47 -07:00
2022-06-26 10:29:44 +10:00
2022-06-03 11:48:47 -07:00
2022-06-03 11:36:34 -07:00
2022-06-22 12:51:49 +10:00
2022-06-03 11:36:34 -07:00
2022-05-28 06:15:27 -06:00
2022-05-30 14:44:27 +02:00
2022-05-30 11:34:13 -07:00
2022-06-03 11:17:49 -07:00
2022-06-22 12:51:49 +10:00
2022-06-05 09:25:12 -07:00
2022-06-03 11:36:34 -07:00
2022-06-08 08:56:03 -04:00
2022-06-01 13:49:15 -07:00
2022-06-09 00:26:35 -04:00
2022-06-04 13:50:23 -07:00
2022-06-03 11:36:34 -07:00
2022-06-11 16:32:47 -07:00
2022-07-20 21:57:39 +10:00
2022-06-07 08:11:35 +02:00
2022-06-05 09:25:12 -07:00
2022-06-05 09:25:12 -07:00
fd97e4ad6d