shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-07 19:30:30 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
572599cbf17affee6aa85b57b661115faac51eeb
linux/drivers
History
Chengfeng Ye 572599cbf1 nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails 
[ Upstream commit 9fec40f850 ]

skb is already freed by dev_kfree_skb in pn533_fill_fragment_skbs,
but follow error handler branch when pn533_fill_fragment_skbs()
fails, skb is freed again, results in double free issue. Fix this
by not free skb in error path of pn533_fill_fragment_skbs.

Fixes: 963a82e07d ("NFC: pn533: Split large Tx frames in chunks")
Fixes: 93ad42020c ("NFC: pn533: Target mode Tx fragmentation support")
Signed-off-by: Chengfeng Ye <cyeaa@connect.ust.hk>
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-11-17 09:48:47 +01:00
..
accessibility
…
acpi
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
2021-11-17 09:48:47 +01:00
amba
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2021-11-06 13:59:45 +01:00
android
binder: use cred instead of task for getsecid
2021-11-17 09:48:16 +01:00
ata
libata: fix checking of DMA state
2021-11-17 09:48:23 +01:00
atm
atm: nicstar: register the interrupt handler in the right place
2021-07-19 08:53:12 +02:00
auxdisplay
auxdisplay: ht16k33: Fix frame buffer device blanking
2021-11-17 09:48:45 +01:00
base
regmap: Fix possible double-free in regcache_rbtree_exit()
2021-11-02 19:46:13 +01:00
bcma
bcma: Fix memory leak for internally-handled cores
2021-09-15 09:47:37 +02:00
block
zram: off by one in read_block_state()
2021-11-17 09:48:47 +01:00
bluetooth
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
2021-11-17 09:48:34 +01:00
bus
bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
2021-10-13 10:08:19 +02:00
cdrom
cdrom: gdrom: initialize global variable at init time
2021-05-26 12:05:19 +02:00
char
hwrng: mtk - Force runtime pm ops for sleep ops
2021-11-17 09:48:37 +01:00
clk
clk: at91: check pmc node status before registering syscore ops
2021-11-17 09:48:42 +01:00
clocksource
clocksource/drivers/timer-ti-dm: Select TIMER_OF
2021-11-17 09:48:39 +01:00
connector
…
counter
counter: 104-quad-8: Return error when invalid mode during ceiling_write
2021-09-15 09:47:34 +02:00
cpufreq
cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
2021-10-06 15:42:30 +02:00
cpuidle
cpuidle: Fix kobject memory leaks in error paths
2021-11-17 09:48:36 +01:00
crypto
crypto: qat - disregard spurious PFVF interrupts
2021-11-17 09:48:36 +01:00
dax
…
dca
…
devfreq
PM / devfreq: Use more accurate returned new_freq as resume_freq
2021-05-14 09:44:20 +02:00
dio
…
dma
dmaengine: dmaengine_desc_callback_valid(): Check for callback_result
2021-11-17 09:48:46 +01:00
dma-buf
dma-buf: WARN on dmabuf release with pending attachments
2021-11-17 09:48:27 +01:00
edac
EDAC/amd64: Handle three rank interleaving mode
2021-11-17 09:48:36 +01:00
eisa
…
extcon
extcon: intel-mrfld: Sync hardware and software state on init
2021-07-19 08:53:16 +02:00
firewire
firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
2021-04-07 14:47:43 +02:00
firmware
firmware/psci: fix application of sizeof to pointer
2021-11-17 09:48:17 +01:00
fpga
fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
2021-09-30 10:09:23 +02:00
fsi
fsi/sbefifo: Fix reset timeout
2021-07-14 16:53:42 +02:00
gnss
…
gpio
gpio: pca953x: Improve bias setting
2021-10-20 11:40:15 +02:00
gpu
drm/plane-helper: fix uninitialized variable reference
2021-11-17 09:48:44 +01:00
greybus
…
hid
HID: u2fzero: properly handle timeouts in usb_submit_urb
2021-11-17 09:48:43 +01:00
hsi
HSI: core: fix resource leaks in hsi_add_client_from_dt()
2021-05-14 09:44:25 +02:00
hv
hyperv/vmbus: include linux/bitops.h
2021-11-17 09:48:20 +01:00
hwmon
hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
2021-11-17 09:48:37 +01:00
hwspinlock
…
hwtracing
intel_th: Wait until port is in reset before programming it
2021-07-20 16:10:46 +02:00
i2c
i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
2021-11-17 09:48:46 +01:00
i3c
Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register"
2021-05-14 09:44:15 +02:00
ide
…
idle
…
iio
iio: dac: ad5446: Fix ad5622_write() return value
2021-11-17 09:48:26 +01:00
infiniband
RDMA/mlx4: Return missed an error if device doesn't support steering
2021-11-17 09:48:43 +01:00
input
Input: i8042 - Add quirk for Fujitsu Lifebook T725
2021-11-17 09:48:17 +01:00
interconnect
interconnect: core: fix error return code of icc_link_destroy()
2021-04-16 11:46:37 +02:00
iommu
iommu: Check if group is NULL before remove device
2021-08-26 08:36:15 -04:00
ipack
ipack: ipoctal: fix module reference leak
2021-10-06 15:42:36 +02:00
irqchip
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
2021-11-17 09:48:41 +01:00
isdn
isdn: mISDN: Fix sleeping function called from invalid context
2021-10-27 09:54:29 +02:00
leds
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
2021-09-15 09:47:33 +02:00
lightnvm
lightnvm: fix memory leak when submit fails
2021-01-27 11:47:53 +01:00
macintosh
…
mailbox
…
mcb
mcb: fix error handling in mcb_alloc_bus()
2021-09-30 10:09:22 +02:00
md
md: fix a lock order reversal in md_alloc
2021-09-30 10:09:24 +02:00
media
media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
2021-11-17 09:48:36 +01:00
memory
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
2021-11-17 09:48:42 +01:00
memstick
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2021-11-17 09:48:37 +01:00
message
…
mfd
mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
2021-09-22 12:26:44 +02:00
misc
cb710: avoid NULL pointer subtraction
2021-10-20 11:40:13 +02:00
mmc
mmc: mxs-mmc: disable regulator on error and in the remove function
2021-11-17 09:48:38 +01:00
mtd
mtd: core: don't remove debugfs directory if device is in use
2021-11-17 09:48:45 +01:00
mux
…
net
bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
2021-11-17 09:48:47 +01:00
nfc
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
2021-11-17 09:48:47 +01:00
ntb
NTB: perf: Fix an error code in perf_setup_inbuf()
2021-09-22 12:26:44 +02:00
nubus
…
nvdimm
libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
2021-10-06 15:42:38 +02:00
nvme
nvme-rdma: fix error code in nvme_rdma_setup_ctrl
2021-11-17 09:48:38 +01:00
nvmem
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2021-10-20 11:40:14 +02:00
of
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
2021-09-22 12:26:34 +02:00
opp
opp: Fix return in _opp_add_static_v2()
2021-11-17 09:48:44 +01:00
oprofile
…
parisc
parisc: Move pci_dev_is_behind_card_dino to where it is used
2021-09-26 14:07:10 +02:00
parport
parport: remove non-zero check on count
2021-09-22 12:26:36 +02:00
pci
PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
2021-11-17 09:48:44 +01:00
pcmcia
pcmcia: i82092: fix a null pointer dereference bug
2021-08-12 13:21:03 +02:00
perf
drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe()
2021-07-14 16:53:14 +02:00
phy
phy: qcom-qusb2: Fix a memory leak on probe
2021-11-17 09:48:43 +01:00
pinctrl
pinctrl: core: fix possible memory leak in pinctrl_enable()
2021-11-17 09:48:26 +01:00
platform
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
2021-11-17 09:48:38 +01:00
pnp
…
power
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
2021-11-17 09:48:44 +01:00
powercap
…
pps
…
ps3
…
ptp
ptp_pch: Load module automatically if ID matches
2021-10-13 10:08:19 +02:00
pwm
pwm: stm32-lp: Don't modify HW state in .remove() callback
2021-09-26 14:07:13 +02:00
rapidio
rapidio: handle create_workqueue() failure
2021-05-26 12:05:17 +02:00
ras
RAS/CEC: Correct ce_add_elem()'s returned values
2021-04-14 08:24:18 +02:00
regulator
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
2021-11-17 09:48:22 +01:00
remoteproc
…
reset
reset: socfpga: add empty driver allowing consumers to probe
2021-11-17 09:48:20 +01:00
rpmsg
rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data()
2021-05-19 10:08:25 +02:00
rtc
rtc: rx8010: select REGMAP_I2C
2021-09-26 14:07:14 +02:00
s390
s390/sclp: fix Secure-IPL facility detection
2021-09-22 12:26:40 +02:00
sbus
…
scsi
scsi: qla2xxx: Turn off target reset during issue_lip
2021-11-17 09:48:46 +01:00
sfi
…
sh
…
siox
…
slimbus
slimbus: ngd: reset dma setup during runtime pm
2021-08-26 08:36:21 -04:00
soc
soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
2021-11-17 09:48:45 +01:00
soundwire
soundwire: stream: Fix test for DP prepare complete
2021-07-14 16:53:45 +02:00
spi
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
2021-11-17 09:48:33 +01:00
spmi
spmi: spmi-pmic-arb: Fix hw_irq overflow
2021-03-04 10:26:49 +01:00
ssb
ssb: Fix error return code in ssb_bus_scan()
2021-07-14 16:53:29 +02:00
staging
staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
2021-11-17 09:48:43 +01:00
target
scsi: target: avoid per-loop XCOPY buffer allocations
2021-09-22 12:26:25 +02:00
tc
…
tee
tee: optee: Fix missing devices unregister during optee_remove
2021-10-27 09:54:25 +02:00
thermal
thermal/drivers/int340x: Do not set a wrong tcc offset on resume
2021-09-30 10:09:26 +02:00
thunderbolt
thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
2021-06-03 08:59:03 +02:00
tty
serial: xilinx_uartps: Fix race condition causing stuck TX
2021-11-17 09:48:43 +01:00
uio
uio_hv_generic: Fix a memory leak in error handling paths
2021-05-26 12:05:17 +02:00
usb
usb: gadget: hid: fix error code in do_config()
2021-11-17 09:48:42 +01:00
vfio
vfio: Use config not menuconfig for VFIO_NOIOMMU
2021-09-22 12:26:23 +02:00
vhost
vhost_net: fix OoB on sendmsg() failure.
2021-09-22 12:26:41 +02:00
video
video: fbdev: chipsfb: use memset_io() instead of memset()
2021-11-17 09:48:42 +01:00
virt
virt: vbox: Do not use wait_event_interruptible when called from kernel context
2021-03-04 10:26:10 +01:00
virtio
virtio: write back F_VERSION_1 before validate
2021-10-20 11:40:14 +02:00
visorbus
visorbus: fix error return code in visorchipset_init()
2021-07-14 16:53:42 +02:00
vlynq
…
vme
…
w1
w1: ds2438: fixing bug that would always get page0
2021-07-20 16:10:41 +02:00
watchdog
ar7: fix kernel builds for compiler test
2021-11-17 09:48:46 +01:00
xen
xen-pciback: Fix return in pm_ctrl_init()
2021-11-17 09:48:46 +01:00
zorro
…
Kconfig
…
Makefile
…