linux/drivers/net/wireless/intel/iwlwifi/fw
Luca Coelho 9039d98581 iwlwifi: fw: harden page loading code
The page loading code trusts the data provided in the firmware images
a bit too much and may cause a buffer overflow or copy unknown data if
the block sizes don't match what we expect.

To prevent potential problems, harden the code by checking if the
sizes we are copying are what we expect.

Cc: stable@vger.kernel.org
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
2018-04-26 15:18:07 +03:00
..
api Merge git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers.git 2018-04-26 13:26:37 +03:00
acpi.c iwlwifi: acpi: move code that reads SPLC to acpi 2017-10-06 15:22:33 +03:00
acpi.h iwlwifi: acpi: move code that reads SPLC to acpi 2017-10-06 15:22:33 +03:00
common_rx.c iwlwifi: implement fseq version mismatch warning 2017-08-01 12:41:45 +03:00
dbg.c iwlwifi: wrt: add fw force restart via triggers 2018-03-28 22:43:40 +03:00
dbg.h iwlwifi: move timestamp functions from debugfs.h to dbg.h 2018-04-20 10:57:16 +03:00
debugfs.c iwlwifi: move timestamp functions from debugfs.h to dbg.h 2018-04-20 10:57:16 +03:00
debugfs.h iwlwifi: move timestamp functions from debugfs.h to dbg.h 2018-04-20 10:57:16 +03:00
error-dump.h iwlwifi: dump smem configuration when firmware crashes 2017-08-09 09:35:15 +03:00
file.h iwlwifi: introduce Image Loader (IML) - new firmware image 2018-04-26 15:18:07 +03:00
img.h iwlwifi: introduce Image Loader (IML) - new firmware image 2018-04-26 15:18:07 +03:00
init.c iwlwifi: Cancel and set MARKER_CMD timer during suspend-resume 2018-03-02 10:19:59 +02:00
notif-wait.c iwlwifi: call iwl_remove_notification from iwl_wait_notification 2017-08-18 16:03:22 +03:00
notif-wait.h
paging.c iwlwifi: fw: harden page loading code 2018-04-26 15:18:07 +03:00
runtime.h iwlwifi: get rid of fw/nvm.c 2018-04-20 10:57:16 +03:00
smem.c iwlwifi: rename the temporary name of A000 to the official 22000 2017-11-28 16:39:57 +02:00