Chen Gang f118e9abdd arch: sparc: kernel: check the memory length before use strcpy(). ... For the related next strcpy(), the destination length is less than 512, but the source maximize length may be 'OPROMMAXPARAM' (4096) which is more than 512. One work flow may: openprom_sunos_ioctl() -> if (cmd == OPROMSETOPT) getstrings() -> will alloc buffer with size 'OPROMMAXPARAM'. opromsetopt() -> devide the buffer into 'var' and 'value' of_set_property() -> pass prom_setprop() -> pass ldom_set_var() And do not mind the additional 4 alignment buffer increasing, since 'sizeof(pkt) - sizeof(pkt.header)' is 4 alignment at least. Signed-off-by: Chen Gang <gang.chen@asianux.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-07-10 13:35:51 -07:00
..
alpha	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
arc	Couple of Platform updates (Device Tree files primarily) given that the	2013-07-10 10:11:26 -07:00
arm	MMC highlights for 3.11:	2013-07-10 11:16:00 -07:00
arm64	tmem hypercall for arm and arm64	2013-07-06 12:38:42 -07:00
avr32	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
blackfin	blackfin updates for Linux 3.11	2013-07-10 10:12:58 -07:00
c6x	Merge branch 'akpm' (updates from Andrew Morton)	2013-07-03 17:12:13 -07:00
cris	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
frv	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
h8300	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
hexagon	mm/hexagon: prepare for removing num_physpages and simplify mem_init()	2013-07-03 16:07:36 -07:00
ia64	Add some casts to avoid warnings from efi_runtime_services_t members.	2013-07-10 10:09:04 -07:00
m32r	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
m68k	Merge branch 'akpm' (updates from Andrew Morton)	2013-07-03 17:12:13 -07:00
metag	arch/metag fixes for v3.11	2013-07-10 10:14:35 -07:00
microblaze	Merge branch 'next' of git://git.monstr.eu/linux-2.6-microblaze	2013-07-10 10:16:07 -07:00
mips	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
mn10300	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
openrisc	mm: invoke oom-killer from remaining unconverted page fault handlers	2013-07-09 10:33:20 -07:00
parisc	Merge branch 'parisc-for-3.11' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux	2013-07-10 10:10:02 -07:00
powerpc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
s390	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
score	mm: invoke oom-killer from remaining unconverted page fault handlers	2013-07-09 10:33:20 -07:00
sh	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
sparc	arch: sparc: kernel: check the memory length before use strcpy().	2013-07-10 13:35:51 -07:00
tile	mm: invoke oom-killer from remaining unconverted page fault handlers	2013-07-09 10:33:20 -07:00
um	mm/um: prepare for removing num_physpages and simplify mem_init()	2013-07-03 16:07:37 -07:00
unicore32	reboot: move arch/x86 reboot= handling to generic kernel	2013-07-09 10:33:29 -07:00
x86	Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2013-07-10 10:17:01 -07:00
xtensa	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-07-09 18:24:39 -07:00
.gitignore
Kconfig	mm: soft-dirty bits for user memory changes tracking	2013-07-03 16:07:26 -07:00