Dan Carpenter dd189feeba tpm: Check for integer overflow in tpm2_map_response_body() ... commit a0bcce2b2a169e10eb265c8f0ebdd5ae4c875670 upstream. The "4 * be32_to_cpu(data->count)" multiplication can potentially overflow which would lead to memory corruption. Add a check for that. Cc: stable@vger.kernel.org Fixes: 745b361e98 ("tpm: infrastructure for TPM spaces") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-11-18 14:03:38 +01:00
..
agp	parisc: parisc-agp requires SBA IOMMU driver	2021-04-14 08:41:59 +02:00
hw_random	hwrng: exynos - Fix runtime PM imbalance on error	2021-07-14 16:55:50 +02:00
ipmi	ipmi/watchdog: Stop watchdog timer when the current action is 'none'	2021-07-19 09:44:59 +02:00
mwave	char/mwave: remove redundant initialization of variable bRC	2020-07-10 14:50:51 +02:00
pcmcia	char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()	2021-07-14 16:56:39 +02:00
tpm	tpm: Check for integer overflow in tpm2_map_response_body()	2021-11-18 14:03:38 +01:00
xilinx_hwicap
xillybus	char: xillybus: use devm_platform_ioremap_resource() to simplify code	2019-11-05 18:29:21 +01:00
adi.c
apm-emulation.c
applicom.c	misc: cleanup minor number definitions in c file into miscdevice.h	2020-03-18 12:27:03 +01:00
applicom.h
bsr.c	mm: don't include asm/pgtable.h if linux/mm.h is already included	2020-06-09 09:39:13 -07:00
ds1620.c
dsp56k.c
dtlk.c
hangcheck-timer.c
hpet.c	char: hpet: add checks after calling ioremap	2021-06-03 09:00:41 +02:00
Kconfig	char: virtio: Select VIRTIO from VIRTIO_CONSOLE.	2020-09-07 14:32:40 +02:00
lp.c	Merge 5.9-rc3 into char-misc-next	2020-08-31 07:17:17 +02:00
Makefile	rtc/alpha: remove legacy rtc driver	2020-03-19 07:41:02 +01:00
mem.c	/dev/zero: fixups for ->read	2020-09-07 10:46:35 +02:00
misc.c
mspec.c	char: mspec: Use kvzalloc() in mspec_mmap()	2020-08-28 12:10:04 +02:00
nsc_gpio.c
nvram.c	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
nwbutton.c
nwbutton.h	misc: cleanup minor number definitions in c file into miscdevice.h	2020-03-18 12:27:03 +01:00
nwflash.c	misc: move FLASH_MINOR into miscdevice.h and fix conflicts	2020-03-18 12:27:04 +01:00
pc8736x_gpio.c
powernv-op-panel.c
ppdev.c	ppdev: Distribute switch variables for initialization	2020-02-23 20:28:12 +01:00
ps3flash.c
random.c	random: initialize ChaCha20 constants with correct endianness	2021-05-11 14:47:19 +02:00
raw.c	raw: don't keep unopened block device around	2020-09-23 10:43:19 -06:00
scx200_gpio.c
sonypi.c
tb0219.c
tlclk.c	drivers: char: tlclk.c: Avoid data race between init and interrupt handler	2020-04-23 16:55:24 +02:00
toshiba.c	misc: cleanup minor number definitions in c file into miscdevice.h	2020-03-18 12:27:03 +01:00
ttyprintk.c	ttyprintk: Add TTY hangup callback.	2021-05-14 09:50:21 +02:00
uv_mmtimer.c
virtio_console.c	virtio_console: Assure used length from device is limited	2021-07-20 16:05:49 +02:00