No description
Find a file
Mikulas Patocka 0cd480bcc7 hex2bin: fix access beyond string end
commit e4d8a29997 upstream.

If we pass too short string to "hex2bin" (and the string size without
the terminating NUL character is even), "hex2bin" reads one byte after
the terminating NUL character.  This patch fixes it.

Note that hex_to_bin returns -1 on error and hex2bin return -EINVAL on
error - so we can't just return the variable "hi" or "lo" on error.
This inconsistency may be fixed in the next merge window, but for the
purpose of fixing this bug, we just preserve the existing behavior and
return -1 and -EINVAL.

Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
Reviewed-by: Andy Shevchenko <andy.shevchenko@gmail.com>
Fixes: b78049831f ("lib: add error checking to hex2bin")
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-04-19 17:48:22 +08:00
arch pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config 2023-04-19 17:48:22 +08:00
block block/compat_ioctl: fix range check in BLKGETSIZE 2023-04-19 17:48:16 +08:00
certs certs: Add support for using elliptic curve keys for signing modules 2021-08-23 19:55:42 +03:00
crypto crypto: xts - Add softdep on ecb 2023-04-19 17:47:16 +08:00
Documentation ext4, doc: fix incorrect h_reserved size 2023-04-19 17:48:16 +08:00
drivers pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config 2023-04-19 17:48:22 +08:00
fs ceph: fix possible NULL pointer dereference for req->r_session 2023-04-19 17:48:22 +08:00
include hex2bin: make the function hex_to_bin constant-time 2023-04-19 17:48:22 +08:00
init init/main.c: return 1 from handled __setup() functions 2023-04-19 17:47:40 +08:00
ipc ipc/sem: do not sleep with a spin lock held 2023-04-19 17:45:01 +08:00
kernel bpf: Fix crash due to out of bounds access into reg2btf_ids. 2023-04-19 17:48:17 +08:00
lib hex2bin: fix access beyond string end 2023-04-19 17:48:22 +08:00
LICENSES LICENSES/dual/CC-BY-4.0: Git rid of "smart quotes" 2021-07-15 06:31:24 -06:00
mm mm: gup: make fault_in_safe_writeable() use fixup_user_fault() 2023-04-19 17:48:19 +08:00
net bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. 2023-04-19 17:48:17 +08:00
samples samples/bpf, xdpsock: Fix race when running for fix duration of time 2023-04-19 17:47:05 +08:00
scripts gcc-plugins: latent_entropy: use /dev/urandom 2023-04-19 17:48:04 +08:00
security Fix incorrect type in assignment of ipv6 port for audit 2023-04-19 17:47:16 +08:00
sound ASoC: soc-dapm: fix two incorrect uses of list iterator 2023-04-19 17:48:15 +08:00
tools selftests/bpf: Add test for reg2btf_ids out of bounds access 2023-04-19 17:48:19 +08:00
usr usr/include/Makefile: add linux/nfc.h to the compile-test coverage 2023-04-19 17:44:58 +08:00
virt KVM: avoid NULL pointer dereference in kvm_dirty_ring_push 2023-04-19 17:47:52 +08:00
.clang-format clang-format: Update with the latest for_each macro list 2021-05-12 23:32:39 +02:00
.cocciconfig
.get_maintainer.ignore Opt out of scripts/get_maintainer.pl 2019-05-16 10:53:40 -07:00
.gitattributes .gitattributes: use 'dts' diff driver for dts files 2019-12-04 19:44:11 -08:00
.gitignore .gitignore: ignore only top-level modules.builtin 2021-05-02 00:43:35 +09:00
.mailmap mailmap: add Andrej Shadura 2021-10-18 20:22:03 -10:00
COPYING COPYING: state that all contributions really are covered by this file 2020-02-10 13:32:20 -08:00
CREDITS MAINTAINERS: Move Daniel Drake to credits 2021-09-21 08:34:58 +03:00
Kbuild kbuild: rename hostprogs-y/always to hostprogs/always-y 2020-02-04 01:53:07 +09:00
Kconfig kbuild: ensure full rebuild when the compiler is updated 2020-05-12 13:28:33 +09:00
MAINTAINERS MAINTAINERS: adjust file entry for of_net.c after movement 2023-04-19 17:46:04 +08:00
Makefile Linux 5.15.37 2023-04-19 17:48:19 +08:00
README Drop all 00-INDEX files from Documentation/ 2018-09-09 15:08:58 -06:00

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.