shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-10 12:57:06 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
b8ef4aaf6e326662c2c0614882d519c17c974a12
linux/drivers
History
Miaoqing Pan b8ef4aaf6e ath10k: fix array out-of-bounds access 
[ Upstream commit c5329b2d5b ]

If firmware reports rate_max > WMI_TPC_RATE_MAX(WMI_TPC_FINAL_RATE_MAX)
or num_tx_chain > WMI_TPC_TX_N_CHAIN, it will cause array out-of-bounds
access, so print a warning and reset to avoid memory corruption.

Tested HW: QCA9984
Tested FW: 10.4-3.9.0.2-00035

Signed-off-by: Miaoqing Pan <miaoqing@codeaurora.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-01 13:17:11 +02:00
..
accessibility
…
acpi
ACPICA: Do not increment operation_region reference counts for field units
2020-08-19 08:16:05 +02:00
amba
…
android
binder: Prevent context manager from incrementing ref 0
2020-08-11 15:33:35 +02:00
ata
libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks
2020-09-09 19:12:34 +02:00
atm
firestream: Fix memleak in fs_open
2020-09-17 13:47:45 +02:00
auxdisplay
…
base
firmware_loader: fix memory leak for paged buffer
2020-09-23 12:40:34 +02:00
bcma
…
block
rbd: require global CAP_SYS_ADMIN for mapping and unmapping
2020-09-17 13:47:53 +02:00
bluetooth
Bluetooth: hci_serdev: Only unregister device if it was registered
2020-08-19 08:16:16 +02:00
bus
bus: ti-sysc: Add missing quirk flags for usb_host_hs
2020-08-19 08:16:00 +02:00
cdrom
…
char
tpm: Unify the mismatching TPM space buffer sizes
2020-08-19 08:16:27 +02:00
clk
clk: rockchip: Fix initialization of mux_pll_src_4plls_p
2020-09-23 12:40:39 +02:00
clocksource
arm64: arch_timer: Disable the compat vdso for cores affected by ARM64_WORKAROUND_1418040
2020-07-22 09:32:51 +02:00
connector
…
counter
counter: 104-quad-8: Add lock guards - generic interface
2020-05-02 08:48:44 +02:00
cpufreq
cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo disabled
2020-09-17 13:47:49 +02:00
cpuidle
cpuidle: Fixup IRQ state
2020-09-09 19:12:21 +02:00
crypto
crypto: caam - Remove broken arc4 support
2020-08-21 13:05:32 +02:00
dax
dm: Call proper helper to determine dax support
2020-09-23 12:40:47 +02:00
dca
…
devfreq
PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent
2020-09-03 11:26:50 +02:00
dio
…
dma
drivers/dma/dma-jz4780: Fix race condition between probe and irq handler
2020-09-17 13:47:46 +02:00
dma-buf
dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling)
2020-10-01 13:17:11 +02:00
edac
EDAC/{i7core,sb,pnd2,skx}: Fix error event severity
2020-09-03 11:26:53 +02:00
eisa
…
extcon
extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()'
2020-06-24 17:50:36 +02:00
firewire
…
firmware
efi: add missed destroy_workqueue when efisubsys_init fails
2020-08-26 10:41:07 +02:00
fpga
fpga: dfl: fix bug in port reset handshake
2020-07-29 10:18:31 +02:00
fsi
…
gnss
gnss: sirf: fix error return code in sirf_probe()
2020-06-22 09:31:20 +02:00
gpio
gpio: arizona: put pm_runtime in case of failure
2020-07-29 10:18:26 +02:00
gpu
drm/amdkfd: Fix race in gfx10 context restore handler
2020-10-01 13:17:11 +02:00
greybus
…
hid
HID: elan: Fix memleak in elan_input_configured
2020-09-17 13:47:48 +02:00
hsi
…
hv
Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
2020-09-23 12:40:40 +02:00
hwmon
hwmon: (applesmc) check status earlier.
2020-09-09 19:12:20 +02:00
hwspinlock
…
hwtracing
coresight: tmc: Fix TMC mode read in tmc_read_unprepare_etb()
2020-08-19 08:16:14 +02:00
i2c
i2c: i801: Fix resume bug
2020-09-23 12:40:44 +02:00
i3c
…
ide
…
idle
…
iio
iio:accel:mma8452: Fix timestamp alignment and prevent data leak.
2020-09-17 13:47:51 +02:00
infiniband
RDMA/bnxt_re: Restrict the max_gids to 256
2020-09-23 12:40:33 +02:00
input
Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists
2020-09-23 12:40:45 +02:00
interconnect
…
iommu
iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE
2020-09-26 18:03:15 +02:00
ipack
ipack: tpci200: fix error return code in tpci200_register()
2020-05-27 17:46:47 +02:00
irqchip
irqchip/stm32-exti: Avoid losing interrupts due to clearing pending bits by mistake
2020-09-03 11:27:06 +02:00
isdn
…
leds
leds: core: Flush scheduled work for system suspend
2020-08-19 08:16:11 +02:00
lightnvm
…
macintosh
macintosh/via-macii: Access autopoll_devs when inside lock
2020-08-19 08:16:15 +02:00
mailbox
mailbox: zynqmp-ipi: Fix NULL vs IS_ERR() check in zynqmp_ipi_mbox_probe()
2020-06-24 17:50:36 +02:00
mcb
…
md
dm: Call proper helper to determine dax support
2020-09-23 12:40:47 +02:00
media
media: mc-device.c: fix memleak in media_device_register_entity
2020-10-01 13:17:10 +02:00
memory
…
memstick
…
message
scsi: mptscsih: Fix read sense data size
2020-07-16 08:16:36 +02:00
mfd
mfd: intel-lpss: Add Intel Tiger Lake PCH-H PCI IDs
2020-09-03 11:26:43 +02:00
misc
habanalabs: check correct vmalloc return code
2020-09-09 19:12:21 +02:00
mmc
mmc: sdhci-of-esdhc: Don't walk device-tree on every interrupt
2020-09-17 13:47:53 +02:00
mtd
mtd: rawnand: fsl_upm: Remove unused mtd var
2020-08-21 13:05:30 +02:00
mux
…
net
ath10k: fix array out-of-bounds access
2020-10-01 13:17:11 +02:00
nfc
NFC: st95hf: Fix memleak in st95hf_in_send_cmd
2020-09-17 13:47:45 +02:00
ntb
NTB: perf: Fix race condition when run with ntb_test
2020-06-24 17:50:41 +02:00
nubus
…
nvdimm
libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr
2020-08-21 13:05:35 +02:00
nvme
nvme-tcp: cancel async events before freeing event struct
2020-09-23 12:40:37 +02:00
nvmem
nvmem: qfprom: remove incorrect write support
2020-06-10 20:24:57 +02:00
of
of: of_mdio: Correct loop scanning logic
2020-07-22 09:32:55 +02:00
opp
opp: Enable resources again if they were disabled earlier
2020-08-26 10:40:53 +02:00
oprofile
…
parisc
parisc: mask out enable and reserved bits from sba imask
2020-08-19 08:16:26 +02:00
parport
…
pci
PCI: qcom: Add missing reset for ipq806x
2020-09-03 11:26:53 +02:00
pcmcia
…
perf
drivers/perf: Prevent forced unbinding of PMU drivers
2020-07-29 10:18:40 +02:00
phy
phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init
2020-09-17 13:47:55 +02:00
pinctrl
pinctrl: ingenic: Properly detect GPIO direction when configured for IRQ
2020-08-21 13:05:29 +02:00
platform
platform/chrome: cros_ec_ishtp: Fix a double-unlock issue
2020-08-21 13:05:30 +02:00
pnp
…
power
power: supply: check if calc_soc succeeded in pm860x_init_battery
2020-08-19 08:16:16 +02:00
powercap
…
pps
…
ps3
…
ptp
…
pwm
pwm: bcm-iproc: handle clk_get_rate() return
2020-08-21 13:05:34 +02:00
rapidio
rapidio: Replace 'select' DMAENGINES 'with depends on'
2020-09-23 12:40:36 +02:00
ras
…
regulator
regulator: pwm: Fix machine constraints application
2020-09-23 12:40:35 +02:00
remoteproc
remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load
2020-08-21 13:05:29 +02:00
reset
…
rpmsg
…
rtc
rtc: goldfish: Enable interrupt in set_alarm() when necessary
2020-08-26 10:40:54 +02:00
s390
s390/zcrypt: fix kmalloc 256k failure
2020-09-23 12:40:46 +02:00
sbus
…
scsi
scsi: qla2xxx: Add error handling for PLOGI ELS passthrough
2020-10-01 13:17:11 +02:00
sfi
…
sh
…
siox
…
slimbus
slimbus: core: Fix mismatch in of_node_get/put
2020-07-22 09:33:08 +02:00
soc
soc: qcom: rpmh-rsc: Set suppress_bind_attrs flag
2020-08-19 08:15:59 +02:00
soundwire
soundwire: fix double free of dangling pointer
2020-09-17 13:47:43 +02:00
spi
spi: Fix memory leak on splited transfers
2020-09-23 12:40:38 +02:00
spmi
…
ssb
…
staging
staging: greybus: audio: fix uninitialized value issue
2020-09-17 13:47:55 +02:00
target
scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem
2020-09-17 13:47:53 +02:00
tc
…
tee
…
thermal
thermal: qcom-spmi-temp-alarm: Don't suppress negative temp
2020-09-09 19:12:29 +02:00
thunderbolt
…
tty
serial: 8250_pci: Add Realtek 816a and 816b
2020-09-23 12:40:45 +02:00
uio
uio_pdrv_genirq: fix use without device tree and no interrupt
2020-07-22 09:33:13 +02:00
usb
ehci-hcd: Move include to keep CRC stable
2020-09-23 12:40:46 +02:00
vfio
vfio/pci: Fix SR-IOV VF handling with MMIO blocking
2020-09-09 19:12:36 +02:00
vhost
vhost/scsi: fix up req type endian-ness
2020-08-05 09:59:42 +02:00
video
fbcon: Fix user font detection test at fbcon_resize().
2020-09-23 12:40:41 +02:00
virt
virt: vbox: Fix guest capabilities mask check
2020-07-22 09:33:11 +02:00
virtio
virtio_ring: Avoid loop when vq is broken in virtqueue_poll
2020-08-26 10:40:57 +02:00
visorbus
…
vlynq
…
vme
…
w1
w1: omap-hdq: cleanup to add missing newline for some dev_dbg
2020-06-22 09:31:26 +02:00
watchdog
watchdog: initialize device before misc_register
2020-08-21 13:05:36 +02:00
xen
xen/xenbus: Fix granting of vmalloc'd memory
2020-09-09 19:12:22 +02:00
zorro
…
Kconfig
…
Makefile
…