Dan Carpenter a6921dd524 can: peak_usb: add range checking in decode operations ... These values come from skb->data so Smatch considers them untrusted. I believe Smatch is correct but I don't have a way to test this. The usb_if->dev[] array has 2 elements but the index is in the 0-15 range without checks. The cfd->len can be up to 255 but the maximum valid size is CANFD_MAX_DLEN (64) so that could lead to memory corruption. Fixes: 0a25e1f4f1 ("can: peak_usb: add support for PEAK new CANFD USB adapters") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Link: https://lore.kernel.org/r/20200813140604.GA456946@mwanda Acked-by: Stephane Grosjean <s.grosjean@peak-system.com> Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>		2020-11-03 22:30:32 +01:00
..
appletalk
arcnet
bonding
caif
can	can: peak_usb: add range checking in decode operations	2020-11-03 22:30:32 +01:00
dsa	net: dsa: qca8k: Fix port MTU setting	2020-11-02 15:14:59 -08:00
ethernet	powerpc/vnic: Extend "failover pending" window	2020-11-02 16:54:04 -08:00
fddi
fjes
hamradio
hippi
hyperv
ieee802154
ipa	net: ipa: command payloads already mapped	2020-10-23 18:28:52 -07:00
ipvlan
mdio
netdevsim
pcs
phy	sfp: Fix error handing in sfp_probe()	2020-11-02 17:19:59 -08:00
plip
ppp
slip
team
usb
vmxnet3
wan	net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup	2020-10-21 17:58:26 -07:00
wimax
wireguard
wireless
xen-netback
bareudp.c
dummy.c
eql.c
geneve.c
gtp.c	gtp: fix an use-before-init in gtp_newlink()	2020-10-29 09:43:21 -07:00
ifb.c
Kconfig
LICENSE.SRC
loopback.c
macsec.c
macvlan.c
macvtap.c
Makefile
mdio.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c
thunderbolt.c
tun.c
veth.c
virtio_net.c	Revert "virtio-net: ethtool configurable RXCSUM"	2020-10-21 20:33:19 -07:00
vrf.c
vsockmon.c
vxlan.c
xen-netfront.c