Deepak Kumar Singh 4fedfe5c4d soc: qcom: qmi_encdec: Restrict string length in decode ... The QMI TLV value for strings in a lot of qmi element info structures account for null terminated strings with MAX_LEN + 1. If a string is actually MAX_LEN + 1 length, this will cause an out of bounds access when the NULL character is appended in decoding. CR-Fixed: 2359244 Change-Id: I4d789bc6017ff58458f77fe875ca4e175a4f1357 Signed-off-by: Chris Lew <clew@codeaurora.org> Signed-off-by: Deepak Kumar Singh <deesin@codeaurora.org>		2019-04-09 01:59:13 -07:00
..
842
fonts
lz4
lzo
mpi	lib/mpi: Fix umul_ppmm() for MIPS64r6	2018-03-03 10:19:42 +01:00
raid6
reed_solomon
xz
zlib_deflate
zlib_inflate
zstd	UPSTREAM: lib: Add zstd modules	2018-08-23 12:00:19 -07:00
.gitignore
argv_split.c
asn1_decoder.c	ASN.1: check for error from ASN1_OP_END__ACT actions	2017-12-16 10:33:48 +01:00
assoc_array.c	assoc_array: Fix a buggy node-splitting case	2017-11-02 09:40:49 +01:00
atomic64.c
atomic64_test.c	x86/cpufeature: Carve out X86_FEATURE_*	2018-07-17 11:31:44 +02:00
audit.c
bcd.c
bch.c
bitmap.c
bitrev.c
bsearch.c
btree.c
bug.c
build_OID_registry
bust_spinlocks.c
check_signature.c
checksum.c
clz_ctz.c
clz_tab.c
cmdline.c	lib/cmdline.c: fix get_options() overflow while parsing ranges	2017-06-29 12:48:51 +02:00
compat_audit.c
cordic.c
cpu-notifier-error-inject.c
cpu_rmap.c
cpumask.c
crc-ccitt.c
crc-itu-t.c
crc-t10dif.c
crc7.c
crc8.c
crc16.c
crc32.c
crc32defs.h
ctype.c
debug_info.c
debug_locks.c
debugobjects.c
dec_and_lock.c
decompress.c
decompress_bunzip2.c
decompress_inflate.c
decompress_unlz4.c
decompress_unlzma.c
decompress_unlzo.c
decompress_unxz.c
devres.c
digsig.c	lib/digsig: fix dereference of NULL user_key_payload	2017-10-27 10:23:17 +02:00
div64.c
dma-debug.c
dump_stack.c
dynamic_debug.c	dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0	2017-12-16 10:33:54 +01:00
dynamic_queue_limits.c
earlycpio.c
extable.c
fault-inject.c
fdt.c
fdt_empty_tree.c
fdt_ro.c
fdt_rw.c
fdt_strerror.c
fdt_sw.c
fdt_wip.c
find_bit.c
flex_array.c
flex_proportions.c
gcd.c
gen_crc32table.c
genalloc.c	lib/genalloc.c: make the avail variable an atomic_long_t	2017-12-16 10:33:54 +01:00
glob.c
halfmd4.c
hash.c
hexdump.c
hweight.c	x86/hweight: Get rid of the special calling convention	2018-04-24 09:32:04 +02:00
idr.c
inflate.c
int_sqrt.c
interval_tree.c
interval_tree_test.c
iomap.c
iomap_copy.c
iommu-common.c
iommu-helper.c
ioremap.c	ioremap: Update pgtable free interfaces with addr	2018-08-17 20:56:45 +02:00
iov_iter.c
irq_regs.c
is_single_threaded.c
jedec_ddr_data.c
kasprintf.c
Kconfig	Merge android-4.4.153 (5e24b4e) into msm-4.4	2018-08-28 17:28:39 +05:30
Kconfig.debug	Merge android-4.4.118 (5f7f76a) into msm-4.4	2018-03-01 17:20:34 +05:30
Kconfig.kasan	Merge android-4.4.106 (2fea039) into msm-4.4	2018-01-18 12:45:07 +05:30
Kconfig.kgdb
Kconfig.kmemcheck
Kconfig.ubsan
kfifo.c
klist.c
kobject.c	kobject: don't use WARN for registration failures	2018-05-02 07:53:42 -07:00
kobject_uevent.c
kstrtox.c
kstrtox.h
lcm.c
libcrc32c.c	crypto: Work around deallocated stack frame reference gcc bug on sparc.	2017-10-12 09:35:25 -07:00
list_debug.c
list_sort.c
llist.c
locking-selftest-hardirq.h
locking-selftest-mutex.h
locking-selftest-rlock-hardirq.h
locking-selftest-rlock-softirq.h
locking-selftest-rlock.h
locking-selftest-rsem.h
locking-selftest-softirq.h
locking-selftest-spin-hardirq.h
locking-selftest-spin-softirq.h
locking-selftest-spin.h
locking-selftest-wlock-hardirq.h
locking-selftest-wlock-softirq.h
locking-selftest-wlock.h
locking-selftest-wsem.h
locking-selftest.c
lockref.c
lru_cache.c
Makefile	Merge android-4.4.153 (5e24b4e) into msm-4.4	2018-08-28 17:28:39 +05:30
md5.c
memory-notifier-error-inject.c
memweight.c
net_utils.c
nlattr.c
nmi_backtrace.c
notifier-error-inject.c
notifier-error-inject.h
of-reconfig-notifier-error-inject.c
oid_registry.c	509: fix printing uninitialized stack memory when OID is empty	2018-02-25 11:03:40 +01:00
once.c
parser.c
pci_iomap.c
percpu-refcount.c
percpu_counter.c
percpu_ida.c
percpu_test.c
plist.c
pm-notifier-error-inject.c
proportions.c
qmi_encdec.c	soc: qcom: qmi_encdec: Restrict string length in decode	2019-04-09 01:59:13 -07:00
qmi_encdec_priv.h
radix-tree.c
random32.c
ratelimit.c
rational.c
rbtree.c
rbtree_test.c
reciprocal_div.c
rhashtable.c	lib/rhashtable: consider param->min_size when setting initial table size	2018-07-25 10:18:16 +02:00
scatterlist.c
seq_buf.c
sg_split.c
sha1.c
show_mem.c
smp_processor_id.c
sort.c
stackdepot.c	Merge android-4.4.106 (2fea039) into msm-4.4	2018-01-18 12:45:07 +05:30
stmp_device.c
string.c
string_helpers.c
strncpy_from_user.c
strnlen_user.c
swiotlb.c	swiotlb: ensure that page-sized mappings are page-aligned	2017-07-05 14:37:20 +02:00
syscall.c
test-hexdump.c
test-kstrtox.c
test-string_helpers.c
test_bpf.c	bpf: fix selftests/bpf test_kmod.sh failure when CONFIG_BPF_JIT_ALWAYS_ON=y	2018-05-30 07:48:56 +02:00
test_firmware.c	test: firmware_class: report errors properly on failure	2017-11-15 17:13:13 +01:00
test_kasan.c	BACKPORT: kasan: report only the first error by default	2017-12-14 08:25:14 -08:00
test_module.c
test_printf.c
test_rhashtable.c
test_static_key_base.c
test_static_keys.c
test_user_copy.c	usercopy: Adjust tests to deal with SMAP/PAN	2017-06-14 13:16:27 +02:00
textsearch.c
timerqueue.c
ts_bm.c
ts_fsm.c
ts_kmp.c
ubsan.c
ubsan.h
ucs2_string.c
usercopy.c
uuid.c
vsprintf.c	lib/vsprintf: Remove atomic-unsafe support for %pCr	2018-07-03 11:21:27 +02:00
xxhash.c	UPSTREAM: lib: Add xxhash module	2018-08-23 12:00:19 -07:00