Dan Carpenter 36fa3e5008 tee: amdtee: out of bounds read in find_session() ... The "index" is a user provided value from 0-USHRT_MAX. If it's over TEE_NUM_SESSIONS (31) then it results in an out of bounds read when we call test_bit(index, sess->sess_mask). Fixes: 757cc3e9ff ("tee: add AMD-TEE driver") Acked-by: Rijo Thomas <Rijo-john.Thomas@amd.com> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>		2020-03-10 08:12:04 +01:00
..
amdtee	tee: amdtee: out of bounds read in find_session()	2020-03-10 08:12:04 +01:00
optee	ARM: SoC-related driver updates	2020-02-08 14:04:19 -08:00
Kconfig	tee: add AMD-TEE driver	2020-01-04 13:49:51 +08:00
Makefile	tee: add AMD-TEE driver	2020-01-04 13:49:51 +08:00
tee_core.c	compat_ioctl: move more drivers to compat_ptr_ioctl	2019-10-23 17:23:44 +02:00
tee_private.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282	2019-06-05 17:36:37 +02:00
tee_shm_pool.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282	2019-06-05 17:36:37 +02:00
tee_shm.c	drm/tee_shm: Drop dma_buf_k(unmap) support	2019-11-25 22:36:25 +01:00