Tadeusz Struk 1d4167a818 tpm: fix race condition in tpm_common_write() ...

commit 3ab2011ea3 upstream.

There is a race condition in tpm_common_write function allowing
two threads on the same /dev/tpm<N>, or two different applications
on the same /dev/tpmrm<N> to overwrite each other commands/responses.
Fixed this by taking the priv->buffer_mutex early in the function.

Also converted the priv->data_pending from atomic to a regular size_t
type. There is no need for it to be atomic since it is only touched
under the protection of the priv->buffer_mutex.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
Reviewed-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-08-15 18:14:41 +02:00

..

agp

agp/intel: Flush all chipset writes after updating the GGTT

2018-03-22 09:17:57 +01:00

hw_random

hwrng: stm32 - add reset during probe

2018-05-30 07:50:48 +02:00

ipmi

ipmi:bt: Set the timeout before doing a capabilities check

2018-07-03 11:23:07 +02:00

mwave

char/mwave: remove custom BOOLEAN type

2016-08-31 14:22:49 +02:00

pcmcia

pcmcia: remove left-over %Z format

2017-06-07 12:07:48 +02:00

tpm

tpm: fix race condition in tpm_common_write()

2018-08-15 18:14:41 +02:00

xilinx_hwicap

char:xilinx_hwicap:buffer_icap - change 1/0 to true/false for bool type variable in function buffer_icap_set_configuration().

2015-06-12 16:58:33 -07:00

xillybus

char: xillybus: Fix spelling mistake and comment

2016-08-31 14:47:54 +02:00

apm-emulation.c

apm-emulation: add hibernation APM events to support suspend2disk

2014-01-07 13:50:28 +01:00

applicom.c

applicom: dereferencing NULL on error path

2014-05-27 17:43:12 -07:00

applicom.h

…

bfin-otp.c

miscdevice: Use module_misc_device() macro

2016-08-31 14:12:35 +02:00

bsr.c

bsr: avoid format string leaking into device name

2014-07-09 16:59:15 -07:00

ds1302.c

…

ds1620.c

ds1620: single_open() leak

2013-05-05 00:11:29 -04:00

dsp56k.c

dsp56k: prevent a harmless underflow

2016-07-14 16:21:53 +09:00

dtlk.c

new helper: file_inode(file)

2013-02-22 23:31:31 -05:00

efirtc.c

drivers/char: make efirtc.c driver explicitly non-modular

2015-09-20 19:32:35 -07:00

generic_nvram.c

don't open-code generic_file_llseek_size()

2015-12-09 13:00:45 -05:00

hangcheck-timer.c

hangcheck-timer: cleanup casting in hangcheck_init()

2014-11-07 11:24:01 -08:00

hpet.c

hpet: Drop stale URLs

2016-02-17 09:39:56 +01:00

Kconfig

char: lack of bool string made CONFIG_DEVPORT always on

2017-04-21 09:31:22 +02:00

lp.c

char: lp: fix possible integer overflow in lp_setup()

2017-05-25 15:44:30 +02:00

Makefile

Merge tag 'rtc-4.8' of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux

2016-08-05 09:48:22 -04:00

mbcs.c

don't open-code generic_file_llseek_size()

2015-12-09 13:00:45 -05:00

mbcs.h

…

mem.c

drivers: char: mem: Fix wraparound check to allow mappings up to the end

2017-06-14 15:06:04 +02:00

misc.c

char: make misc_deregister a void function

2015-08-05 10:35:49 -07:00

mmtimer.c

drivers/char/mmtimer.c: Remove useless kfree

2012-09-26 13:20:40 -07:00

mspec.c

tree wide: use kvfree() than conditional kfree()/vfree()

2016-01-22 17:02:18 -08:00

nsc_gpio.c

new helper: file_inode(file)

2013-02-22 23:31:31 -05:00

nvram.c

char/nvram: set array of const as const

2016-02-08 14:57:30 -08:00

nwbutton.c

char: nwbutton: avoid unused variable warning

2016-02-09 17:39:56 -08:00

nwbutton.h

…

nwflash.c

new helpers: no_seek_end_llseek{,_size}()

2015-12-23 10:41:31 -05:00

pc8736x_gpio.c

pc8736x_gpio: use platform_device_unregister in pc8736x_gpio_cleanup()

2012-10-24 15:52:29 -07:00

powernv-op-panel.c

powerpc/powernv: Add driver for operator panel on FSP machines

2016-06-29 17:33:46 +10:00

ppdev.c

ppdev: fix registering same device name

2017-04-12 12:41:10 +02:00

ps3flash.c

wrappers for ->i_mutex access

2016-01-22 18:04:28 -05:00

random.c

random: mix rdrand with entropy sent in from userspace

2018-08-03 07:55:26 +02:00

raw.c

drivers: char: raw: Removed unnecessary braces

2016-02-08 14:57:30 -08:00

rtc.c

various char drivers: remove deprecated IRQF_DISABLED

2013-10-16 12:36:10 -07:00

scx200_gpio.c

…

snsc_event.c

various char drivers: remove deprecated IRQF_DISABLED

2013-10-16 12:36:10 -07:00

snsc.c

snsc: check return value of class_create

2016-08-31 14:47:54 +02:00

snsc.h

…

sonypi.c

fs: Replace current_fs_time() with current_time()

2016-09-27 21:06:22 -04:00

tb0219.c

mips: separate extable.h, switch module.h to it

2016-10-05 18:36:18 -04:00

tile-srom.c

tile-srom: avoid krealloc(... __GFP_ZERO) pattern

2016-08-30 14:45:50 +02:00

tlclk.c

tlclk: remove deprecated IRQF_DISABLED

2013-10-16 12:36:10 -07:00

toshiba.c

toshiba laptop: replace ioremap_cache with ioremap

2015-08-05 17:26:00 -07:00

ttyprintk.c

ttyprintk: Neaten and simplify printing

2016-09-13 17:30:17 +02:00

uv_mmtimer.c

…

virtio_console.c

virtio_console: free buffers after reset

2018-05-01 15:13:05 -07:00