Oliver Hartkopp 8781bfdf73 can: bcm: check timer values before ktime conversion ... commit 93171ba6f1deffd82f381d36cb13177872d023f6 upstream. Kyungtae Kim detected a potential integer overflow in bcm_[rx|tx]_setup() when the conversion into ktime multiplies the given value with NSEC_PER_USEC (1000). Reference: https://marc.info/?l=linux-can&m=154732118819828&w=2 Add a check for the given tv_usec, so that the value stays below one second. Additionally limit the tv_sec value to a reasonable value for CAN related use-cases of 400 days and ensure all values to be positive. Reported-by: Kyungtae Kim <kt0755@gmail.com> Tested-by: Oliver Hartkopp <socketcan@hartkopp.net> Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net> Cc: linux-stable <stable@vger.kernel.org> # versions 2.6.26 to 4.7 Tested-by: Kyungtae Kim <kt0755@gmail.com> Acked-by: Andre Naujoks <nautsch2@gmail.com> Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-02-06 19:43:04 +01:00
..
af_can.c	can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once	2018-01-31 12:06:08 +01:00
af_can.h	can: Fix kernel panic at security_sock_rcv_skb	2017-02-18 16:39:26 +01:00
bcm.c	can: bcm: check timer values before ktime conversion	2019-02-06 19:43:04 +01:00
gw.c	can: gw: ensure DLC boundaries after CAN frame modification	2019-01-26 09:42:45 +01:00
Kconfig
Makefile
proc.c
raw.c	can: Fix kernel panic at security_sock_rcv_skb	2017-02-18 16:39:26 +01:00