Home
last modified time | relevance | path

Searched refs:id_string (Results 1 – 11 of 11) sorted by relevance

/OK3568_Linux_fs/buildroot/package/ipmitool/
H A D0013-fru-sdr-Fix-id_string-buffer-overflows.patch4 Subject: [PATCH] fru, sdr: Fix id_string buffer overflows
9 9 variants of stack buffer overflow when parsing `id_string` field of
12 SDR record structs have an `id_code` field, and an `id_string` `char`
15 The length of `id_string` is calculated as `(id_code & 0x1f) + 1`,
38 - memcpy(desc, fru->id_string, fru->id_code & 0x01f);
39 + memcpy(desc, fru->id_string, __min(fru->id_code & 0x01f, sizeof(desc)));
51 - snprintf(desc, (sensor->id_code & 0x1f) + 1, "%s", sensor->id_string);
52 + snprintf(desc, sizeof(desc), "%.*s", (sensor->id_code & 0x1f) + 1, sensor->id_string);
60 - snprintf(desc, (mc->id_code & 0x1f) + 1, "%s", mc->id_string);
61 + snprintf(desc, sizeof(desc), "%.*s", (mc->id_code & 0x1f) + 1, mc->id_string);
[all …]
/OK3568_Linux_fs/yocto/meta-openembedded/meta-oe/recipes-kernel/ipmitool/ipmitool/
H A D0005-fru-sdr-Fix-id_string-buffer-overflows.patch4 Subject: [PATCH 5/5] fru, sdr: Fix id_string buffer overflows
9 9 variants of stack buffer overflow when parsing `id_string` field of
12 SDR record structs have an `id_code` field, and an `id_string` `char`
15 The length of `id_string` is calculated as `(id_code & 0x1f) + 1`,
39 - memcpy(desc, fru->id_string, fru->id_code & 0x01f);
40 + memcpy(desc, fru->id_string, __min(fru->id_code & 0x01f, sizeof(desc)));
52 - snprintf(desc, (sensor->id_code & 0x1f) + 1, "%s", sensor->id_string);
53 + snprintf(desc, sizeof(desc), "%.*s", (sensor->id_code & 0x1f) + 1, sensor->id_string);
61 - snprintf(desc, (mc->id_code & 0x1f) + 1, "%s", mc->id_string);
62 + snprintf(desc, sizeof(desc), "%.*s", (mc->id_code & 0x1f) + 1, mc->id_string);
[all …]
/OK3568_Linux_fs/kernel/drivers/parisc/
H A Deisa_enumerator.c429 char id_string[8]; in init_slot() local
446 print_eisa_id(id_string, es->eisa_slot_id); in init_slot()
447 printk(" expected %s)\n", id_string); in init_slot()
453 print_eisa_id(id_string, id); in init_slot()
455 slot, id_string); in init_slot()
457 print_eisa_id(id_string, es->eisa_slot_id); in init_slot()
458 printk(" expected %s\n", id_string); in init_slot()
/OK3568_Linux_fs/kernel/drivers/infiniband/ulp/srpt/
H A Dib_dm_mad.h123 u8 id_string[64]; member
H A Dib_srpt.c346 strcpy(iocp->id_string, SRPT_ID_STRING); in srpt_get_ioc()
/OK3568_Linux_fs/kernel/drivers/scsi/
H A DFlashPoint.c302 unsigned char id_string[ID_STRING_LENGTH]; member
5506 &FPT_scamInfo[p_our_id].id_string[0]); in FPT_scini()
5526 id_string[0]); in FPT_scini()
5549 id_string[0] != 0xFF) in FPT_scini()
5551 id_string[1] != 0xFA)) { in FPT_scini()
5554 id_string[0] = 0xFF; in FPT_scini()
5556 id_string[1] = 0xFA; in FPT_scini()
5578 FPT_scamInfo[p_our_id].id_string[0] = SLV_TYPE_CODE0; in FPT_scini()
5591 &FPT_scamInfo[p_our_id].id_string[0]))) { in FPT_scini()
5614 id_string[0] in FPT_scini()
[all …]
/OK3568_Linux_fs/kernel/drivers/net/wan/
H A Dcosa.c151 char id_string[COSA_MAX_ID_STRING]; /* ROM monitor ID string */ member
467 if (cosa_reset_and_read_id(cosa, cosa->id_string) < 0) { in cosa_probe()
474 if (!strncmp(cosa->id_string, "SRP", 3)) in cosa_probe()
476 else if (!strncmp(cosa->id_string, "COSA", 4)) in cosa_probe()
588 cosa->num, cosa->id_string, cosa->type, in cosa_probe()
1115 int l = strlen(cosa->id_string)+1; in cosa_getidstr()
1116 if (copy_to_user(string, cosa->id_string, l)) in cosa_getidstr()
/OK3568_Linux_fs/yocto/meta-openembedded/meta-oe/recipes-kernel/ipmitool/
H A Dipmitool_1.8.18.bb32 file://0005-fru-sdr-Fix-id_string-buffer-overflows.patch \
/OK3568_Linux_fs/kernel/drivers/staging/qlge/
H A Dqlge_dbg.c744 strncpy(mpi_coredump->mpi_global_header.id_string, "MPI Coredump", in ql_core_dump()
745 sizeof(mpi_coredump->mpi_global_header.id_string)); in ql_core_dump()
1232 strncpy(mpi_coredump->mpi_global_header.id_string, "MPI Coredump", in ql_gen_reg_dump()
1233 sizeof(mpi_coredump->mpi_global_header.id_string)); in ql_gen_reg_dump()
H A Dqlge.h1627 u8 id_string[16]; member
/OK3568_Linux_fs/kernel/drivers/net/ethernet/emulex/benet/
H A Dbe_cmds.h1391 u8 id_string[128]; member
1400 u8 id_string[128]; member