linux-stable/drivers/soc
Chris Lew 6b58859e7c soc: qcom: qmi_encdec: Restrict string length in decode
commit 8d207400fd upstream.

The QMI TLV value for strings in a lot of qmi element info structures
account for null terminated strings with MAX_LEN + 1. If a string is
actually MAX_LEN + 1 length, this will cause an out of bounds access
when the NULL character is appended in decoding.

Fixes: 9b8a11e826 ("soc: qcom: Introduce QMI encoder/decoder")
Cc: stable@vger.kernel.org
Signed-off-by: Chris Lew <quic_clew@quicinc.com>
Signed-off-by: Praveenkumar I <quic_ipkumar@quicinc.com>
Link: https://lore.kernel.org/r/20230801064712.3590128-1-quic_ipkumar@quicinc.com
Signed-off-by: Bjorn Andersson <andersson@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-09-23 10:48:12 +02:00
..
actions
amlogic meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init 2022-08-25 11:15:00 +02:00
atmel drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] 2021-02-03 23:23:24 +01:00
bcm soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs 2022-09-15 12:17:05 +02:00
dove
fsl soc/fsl/qe: fix usb.c build errors 2023-08-11 11:45:08 +02:00
gemini
imx
lantiq
mediatek Revert "ASoC: mediatek: Check for error clk pointer" 2022-02-08 18:23:15 +01:00
qcom soc: qcom: qmi_encdec: Restrict string length in decode 2023-09-23 10:48:12 +02:00
renesas
rockchip soc: rockchip: Fix refcount leak in rockchip_grf_init 2022-06-14 16:59:32 +02:00
samsung
sunxi soc: sunxi: sram: Fix debugfs info for A64 SRAM C 2022-10-05 10:36:45 +02:00
tegra soc/tegra: fuse: Fix bitwise vs. logical OR warning 2021-12-22 09:19:01 +01:00
ti drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static 2023-01-18 11:30:02 +01:00
ux500 ARM: ux500: do not directly dereference __iomem 2023-01-18 11:30:41 +01:00
versatile
xilinx
zte
Kconfig
Makefile