linux/drivers/input/misc
Dan Carpenter a95ef0199e Input: ims-pcu - check record size in ims_pcu_flash_firmware()
The "len" variable comes from the firmware and we generally do
trust firmware, but it's always better to double check.  If the "len"
is too large it could result in memory corruption when we do
"memcpy(fragment->data, rec->data, len);"

Fixes: 628329d524 ("Input: add IMS Passenger Control Unit driver")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/131fd1ae92c828ee9f4fa2de03d8c210ae1f3524.1748463049.git.dan.carpenter@linaro.org
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
2025-05-30 16:15:43 -07:00
..
88pm80x_onkey.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
88pm860x_onkey.c Input: 88pm860x - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() 2023-01-09 20:25:20 -08:00
88pm886-onkey.c input: Add onkey driver for Marvell 88PM886 PMIC 2024-06-28 15:41:20 +01:00
Kconfig Input: max77693 - add max77705 haptic support 2025-02-20 16:37:47 +00:00
Makefile Input: add driver for the input part of qnap-mcu devices 2024-12-17 13:14:42 +00:00
ab8500-ponkey.c Input: ab8500-ponkey - fix incorrect name in 'ab8500_ponkey' doc header 2020-11-08 22:27:54 -08:00
ad714x-i2c.c Input: drop explicit initialization of struct i2c_device_id::driver_data to 0 2024-05-13 15:43:19 -07:00
ad714x-spi.c Input: ad714x - unify dev_pm_ops using EXPORT_SIMPLE_DEV_PM_OPS() 2023-01-27 14:49:52 -08:00
ad714x.c Input: ad714x - use guard notation when acquiring mutex 2024-10-03 09:10:35 -07:00
ad714x.h Input: ad714x - unify dev_pm_ops using EXPORT_SIMPLE_DEV_PM_OPS() 2023-01-27 14:49:52 -08:00
adxl34x-i2c.c Input: adxl34x - switch to using managed resources 2024-06-11 11:17:44 -07:00
adxl34x-spi.c Input: adxl34x - switch to using managed resources 2024-06-11 11:17:44 -07:00
adxl34x.c Input: adxl34x - switch to using "guard" notation 2024-06-11 11:17:52 -07:00
adxl34x.h Input: adxl34x - switch to using managed resources 2024-06-11 11:17:44 -07:00
apanel.c Input: drop explicit initialization of struct i2c_device_id::driver_data to 0 2024-05-13 15:43:19 -07:00
ariel-pwrbutton.c Input: ariel-pwrbutton - add SPI device ID table 2021-10-01 21:24:14 -07:00
arizona-haptics.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 2019-06-19 17:09:55 +02:00
atc260x-onkey.c input: atc260x: Add onkey driver for ATC260x PMICs 2021-03-10 11:10:30 +00:00
ati_remote2.c Input: ati_remote2 - use guard notation when acquiring mutex 2024-10-03 09:10:35 -07:00
atlas_btns.c Input: atlas - drop owner assignment 2024-04-08 16:16:55 +02:00
atmel_captouch.c Input: drop explicit initialization of struct i2c_device_id::driver_data to 0 2024-05-13 15:43:19 -07:00
axp20x-pek.c Input: axp20x-pek - avoid needless newline removal 2023-09-30 09:35:31 -07:00
bma150.c Input: drop explicit initialization of struct i2c_device_id::driver_data to 0 2024-05-13 15:43:19 -07:00
cm109.c Input: cm109 - use guard notation when acquiring mutex and spinlock 2024-10-03 09:10:35 -07:00
cma3000_d0x.c Input: cma3000_d0x - use guard notation when acquiring mutex 2024-10-03 09:10:35 -07:00
cma3000_d0x.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 234 2019-06-19 17:09:07 +02:00
cma3000_d0x_i2c.c Input: drop explicit initialization of struct i2c_device_id::driver_data to 0 2024-05-13 15:43:19 -07:00
cobalt_btns.c Input: cobalt_btns - switch to using polled mode of input devices 2019-10-29 17:14:17 -07:00
cpcap-pwrbutton.c Input: cpcap-pwrbutton - replace GPLv2 boilerplate with SPDX 2023-07-05 14:50:00 -07:00
cs40l50-vibra.c Input: cs40l50 - fix wrong usage of INIT_WORK() 2024-11-07 21:54:44 -08:00
da7280.c Input: da7280 - use guard notation when acquiring mutex and spinlock 2024-10-03 09:10:35 -07:00
da9052_onkey.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
da9055_onkey.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
da9063_onkey.c Input: da9063_onkey - avoid explicitly setting input's parent 2024-01-04 12:02:20 -08:00
drv260x.c Input: drv260x - use guard notation when acquiring mutex 2024-10-03 09:10:36 -07:00
drv2665.c Input: drv2665 - use guard notation when acquiring mutex 2024-10-03 09:10:36 -07:00
drv2667.c Input: drv2667 - use guard notation when acquiring mutex 2024-10-03 09:10:36 -07:00
e3x0-button.c Input: e3x0-button - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() 2023-01-09 20:25:21 -08:00
gpio-beeper.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152 2019-05-30 11:26:32 -07:00
gpio-vibra.c Input: Explicitly include correct DT includes 2023-07-17 10:03:07 -07:00
gpio_decoder.c treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_30.RULE (part 2) 2022-06-10 14:51:35 +02:00
hisi_powerkey.c Input: hisi_powerkey - enable system-wakeup for s2idle 2025-05-10 22:26:33 -07:00
hp_sdc_rtc.c Input: hp_sdc_rtc - mark an unused function as __maybe_unused 2023-02-21 13:57:40 -08:00
ibm-panel.c Input: ibm-panel - use guard notation when acquiring spinlock 2024-10-03 09:10:36 -07:00
ideapad_slidebar.c Input: i8042 - Add support for platform filter contexts 2025-01-15 16:26:39 +02:00
ims-pcu.c Input: ims-pcu - check record size in ims_pcu_flash_firmware() 2025-05-30 16:15:43 -07:00
iqs269a.c Input: iqs269a - use cleanup facility for fwnodes 2024-10-03 09:10:37 -07:00
iqs626a.c Input: iqs626a - use cleanup facility for fwnodes 2024-10-03 09:10:37 -07:00
iqs7222.c Input: iqs7222 - preserve system status register 2025-03-09 23:12:07 -07:00
keyspan_remote.c Input: move from strlcpy with unused retval to strscpy 2022-08-18 15:44:08 -07:00
kxtj9.c Input: kxtj9 - use guard notation when acquiring mutex/disabling irq 2024-10-03 09:10:36 -07:00
m68kspkr.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
max8925_onkey.c Input: max8925_onkey - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() 2023-01-09 20:25:21 -08:00
max8997_haptic.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
max77650-onkey.c Input: max77650-onkey - add of_match table 2020-01-16 20:23:24 -08:00
max77693-haptic.c Input: max77693 - add max77705 haptic support 2025-02-20 16:37:47 +00:00
mc13783-pwrbutton.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
mma8450.c Input: mma8450 - add chip ID check in probe 2024-12-17 11:11:46 -08:00
nxp-bbnsm-pwrkey.c Input: bbnsm_pwrkey - add remove hook 2024-12-16 09:34:16 -08:00
palmas-pwrbutton.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
pcap_keys.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
pcf8574_keypad.c Input: drop explicit initialization of struct i2c_device_id::driver_data to 0 2024-05-13 15:43:19 -07:00
pcf50633-input.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
pcspkr.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
pm8xxx-vibrator.c input: pm8xxx-vibrator: add new SPMI vibrator support 2024-04-17 15:27:12 -07:00
pm8941-pwrkey.c Input: pm8941-pwrkey - fix dev_dbg() output in pm8941_pwrkey_irq() 2025-02-25 12:58:54 -08:00
pmic8xxx-pwrkey.c Input: Explicitly include correct DT includes 2023-07-17 10:03:07 -07:00
powermate.c Input: powermate - use guard notation when acquiring spinlock 2024-10-03 09:10:37 -07:00
pwm-beeper.c Input: pwm-beeper - use guard notation when acquiring spinlock 2024-10-03 09:10:37 -07:00
pwm-vibra.c pwm: Rename pwm_apply_state() to pwm_apply_might_sleep() 2023-12-20 16:07:04 +01:00
qnap-mcu-input.c Input: add driver for the input part of qnap-mcu devices 2024-12-17 13:14:42 +00:00
rave-sp-pwrbutton.c
rb532_button.c Input: rb532_button - switch to using polled mode of input devices 2019-10-29 17:15:46 -07:00
regulator-haptic.c Input: Use str_enable_disable-like helpers 2025-01-14 13:41:41 -08:00
retu-pwrbutton.c
rk805-pwrkey.c Input: rk805-pwrkey - fix module autoloading 2022-08-22 16:59:49 -07:00
rotary_encoder.c Input: rotary_encoder - use guard notation when acquiring mutex 2024-10-03 09:10:38 -07:00
rt5120-pwrkey.c Input: rt5120 - add power key support 2022-08-31 15:48:49 -07:00
sc27xx-vibra.c Input: sc27xx - add support for sc2730 and sc2721 2020-12-11 19:00:21 -08:00
sgi_btns.c Input: add missing MODULE_DESCRIPTION() macros 2024-06-09 14:38:48 -07:00
soc_button_array.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
sparcspkr.c Input: sparcspkr - avoid unannotated fall-through 2025-04-18 18:38:46 -07:00
stpmic1_onkey.c Input: stpmic1_onekey - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() 2023-01-09 20:25:23 -08:00
tps65218-pwrbutton.c treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_320.RULE 2022-06-10 14:51:36 +02:00
tps65219-pwrbutton.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
twl4030-pwrbutton.c Input: twl4030-pwrbutton - fix kernel-doc warning 2024-07-11 09:57:58 -07:00
twl4030-vibra.c Input: twl4030-vibra - use cleanup facility for device_node 2024-10-19 21:21:40 -07:00
twl6040-vibra.c Input: twl6040-vibra - use cleanup facility for device_node 2024-10-19 21:21:39 -07:00
uinput.c [tree-wide] finally take no_llseek out 2024-09-27 08:18:43 -07:00
wistron_btns.c Input updates for v6.13-rc0 2024-11-25 10:31:39 -08:00
wm831x-on.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
xen-kbdfront.c xen: make remove callback of xen driver void returned 2022-12-15 16:06:10 +01:00
yealink.c Input: correct typos in multiple comments across misc drivers 2024-09-30 08:00:16 -07:00
yealink.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156 2019-05-30 11:26:35 -07:00