Ian Abbott 178a09b0fb staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift ... commit fc846e9db6 upstream. The `INSN_CONFIG` comedi instruction with sub-instruction code `INSN_CONFIG_DIGITAL_TRIG` includes a base channel in `data[3]`. This is used as a right shift amount for other bitmask values without being checked. Shift amounts greater than or equal to 32 will result in undefined behavior. Add code to deal with this, adjusting the checks for invalid channels so that enabled channel bits that would have been lost by shifting are also checked for validity. Only channels 0 to 15 are valid. Fixes: a8c66b684e ("staging: comedi: addi_apci_1500: rewrite the subdevice support functions") Cc: <stable@vger.kernel.org> #4.0+: ef75e14a6c: staging: comedi: verify array index is correct before using it Cc: <stable@vger.kernel.org> #4.0+ Signed-off-by: Ian Abbott <abbotti@mev.co.uk> Link: https://lore.kernel.org/r/20200717145257.112660-5-abbotti@mev.co.uk Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-07-29 10:18:42 +02:00
..
android	staging: android: ion: use vmap instead of vm_map_ram	2020-06-22 09:30:57 +02:00
axis-fifo
board
clocking-wizard
comedi	staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift	2020-07-29 10:18:42 +02:00
emxx_udc
exfat
fbtft
fieldbus
fsl-dpaa2
fwserial
gasket	staging: gasket: Fix mapping refcnt leak when register/store fails	2020-06-24 17:50:21 +02:00
gdm724x
goldfish
greybus	staging: greybus: fix a missing-check bug in gb_lights_light_config()	2020-06-24 17:50:20 +02:00
gs_fpgaboot
iio	staging: iio: ad2s1210: Fix SPI reading	2020-05-27 17:46:45 +02:00
isdn
kpc2000	staging: kpc2000: fix error return code in kp2000_pcie_probe()	2020-05-27 17:46:45 +02:00
ks7010
media	media: cedrus: Program output format during each run	2020-06-22 09:31:18 +02:00
most
mt7621-dma
mt7621-dts
mt7621-pci
mt7621-pci-phy
mt7621-pinctrl
netlogic
nvec
octeon
octeon-usb
olpc_dcon
pi433
qlge
ralink-gdma
rtl8188eu	staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table	2020-04-01 11:02:16 +02:00
rtl8192e
rtl8192u
rtl8712	staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK	2020-06-10 20:24:57 +02:00
rtl8723bs	Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()	2020-06-30 15:37:11 -04:00
rts5208
sm750fb	staging: sm750fb: add missing case while setting FB_VISUAL	2020-06-24 17:50:24 +02:00
speakup	staging/speakup: fix get_word non-space look-ahead	2020-03-25 08:25:55 +01:00
unisys
uwb
vc04_services
vme
vt6655
vt6656	staging: vt6656: Power save stop wake_up_count wrap around.	2020-04-29 16:33:22 +02:00
wilc1000	staging: wilc1000: Increase the size of wid_list array	2020-06-24 17:50:23 +02:00
wlan-ng	staging: wlan-ng: properly check endpoint types	2020-07-29 10:18:42 +02:00
wusbcore
Kconfig
Makefile