shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-03-24 19:40:21 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
caaa3b42a204c6d2ec226e92df45199933e850a3
linux/drivers
History
Wang Weiyang cb87af2c19 rapidio: fix possible UAF when kfifo_alloc() fails 
[ Upstream commit 02d7d89f81 ]

If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free
priv. But priv is still in the chdev->file_list, then list traversal
may cause UAF. This fixes the following smatch warning:

drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list

Link: https://lkml.kernel.org/r/20221123095147.52408-1-wangweiyang2@huawei.com
Fixes: e8de370188 ("rapidio: add mport char device driver")
Signed-off-by: Wang Weiyang <wangweiyang2@huawei.com>
Cc: Alexandre Bounine <alex.bou9@gmail.com>
Cc: Dan Carpenter <error27@gmail.com>
Cc: Jakob Koschel <jakobkoschel@gmail.com>
Cc: John Hubbard <jhubbard@nvidia.com>
Cc: Matt Porter <mporter@kernel.crashing.org>
Cc: Yang Yingliang <yangyingliang@huawei.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-12-31 13:32:00 +01:00
..
accessibility
speakup: replace utils' u_char with unsigned char
2022-11-09 15:25:24 +01:00
acpi
ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
2022-12-31 13:31:59 +01:00
amba
…
android
binder: validate alloc->mm in ->mmap() handler
2022-11-09 15:41:27 +01:00
ata
ata: libahci_platform: ahci_platform_find_clk: oops, NULL pointer
2022-12-07 08:36:37 +09:00
atm
…
auxdisplay
…
base
PM: runtime: Do not call __rpm_callback() from rpm_idle()
2022-12-31 13:31:59 +01:00
bcma
Merge tag 'irq-core-2022-10-12' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2022-10-12 10:23:24 -07:00
block
Merge tag 'block-6.1-2022-11-25' of git://git.kernel.dk/linux
2022-11-25 17:50:57 -08:00
bluetooth
Bluetooth: btusb: Add debug message for CSR controllers
2022-12-02 13:09:30 -08:00
bus
bus: ixp4xx: Don't touch bit 7 on IXP42x
2022-11-22 23:12:18 +01:00
cdrom
…
char
tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
2022-12-31 13:31:54 +01:00
clk
clk: qcom: gcc-sc8280xp: add cxo as parent for three ufs ref clks
2022-11-22 18:27:07 -08:00
clocksource
clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock()
2022-12-31 13:31:59 +01:00
comedi
…
connector
…
counter
counter: 104-quad-8: Fix race getting function mode and direction
2022-10-23 20:39:26 -04:00
cpufreq
cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
2022-12-31 13:31:58 +01:00
cpuidle
cpuidle: dt: Return the correct numbers of parsed idle states
2022-12-31 13:31:55 +01:00
crypto
Merge tag 'v6.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2022-10-10 13:04:25 -07:00
cxl
cxl/region: Recycle region ids
2022-11-04 16:03:43 -07:00
dax
device-dax: Fix duplicate 'hmem' device registration
2022-11-21 15:34:40 -08:00
dca
…
devfreq
PM / devfreq: rockchip-dfi: Fix an error message
2022-09-26 03:59:43 +09:00
dio
…
dma
dmaengine: at_hdmac: Check return code of dma_async_device_register
2022-11-08 10:43:57 +05:30
dma-buf
dma-buf: fix racing conflict of dma_heap_add()
2022-11-22 18:27:56 +05:30
edac
EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
2022-12-31 13:31:57 +01:00
eisa
…
extcon
extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered
2022-11-08 16:45:31 +01:00
firewire
…
firmware
firmware: ti_sci: Fix polled mode during system suspend
2022-12-31 13:31:48 +01:00
fpga
fpga: m10bmc-sec: Fix kconfig dependencies
2022-11-15 21:46:58 +08:00
fsi
fsi: core: Check error number after calling ida_simple_get
2022-09-28 21:10:57 +09:30
gnss
…
gpio
gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()
2022-12-06 10:10:46 +01:00
gpu
Merge tag 'drm-misc-fixes-2022-12-08' of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes
2022-12-09 10:11:06 +10:00
greybus
…
hid
Merge tag 'for-linus-2022120801' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid
2022-12-08 12:37:42 -08:00
hsi
HSI: nokia-modem: Replace of_gpio_count() by gpiod_count()
2022-09-20 17:29:29 +02:00
hte
…
hv
Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
2022-11-21 10:57:42 +00:00
hwmon
hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
2022-12-01 09:20:55 -08:00
hwspinlock
hwspinlock: qcom: add support for MMIO on older SoCs
2022-09-13 17:01:18 -05:00
hwtracing
coresight: cti: Fix hang in cti_disable_hw()
2022-10-25 19:08:07 +02:00
i2c
i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
2022-12-02 00:12:25 +01:00
i3c
i3c: master: Remove the wrong place of reattach.
2022-10-12 23:45:29 +02:00
idle
intel_idle: Add AlderLake-N support
2022-09-21 20:33:49 +02:00
iio
iio: adc: aspeed: Remove the trim valid dts property.
2022-11-14 20:20:08 +00:00
infiniband
RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
2022-10-28 12:59:40 -03:00
input
Merge tag 'input-for-v6.1-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2022-12-04 12:18:37 -08:00
interconnect
Merge branch 'icc-ignore-return-val' into icc-next
2022-09-20 15:57:00 +03:00
iommu
iommu/vt-d: Fix buggy QAT device mask
2022-12-05 14:27:03 +01:00
ipack
Merge tag 'char-misc-6.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2022-10-08 08:56:37 -07:00
irqchip
irqchip/loongson-liointc: Fix improper error handling in liointc_init()
2022-12-31 13:31:57 +01:00
isdn
mISDN: fix misuse of put_device() in mISDN_register_device()
2022-11-14 10:43:13 +00:00
leds
leds: simatic-ipc-leds-gpio: fix incorrect LED to GPIO mapping
2022-10-24 11:32:10 +02:00
macintosh
Merge tag 'powerpc-6.1-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
2022-10-09 14:05:15 -07:00
mailbox
mailbox: pcc: Reset pcc_chan_count to zero in case of PCC probe failure
2022-12-31 13:31:57 +01:00
mcb
…
md
Merge tag 'block-6.1-2022-11-18' of git://git.kernel.dk/linux
2022-11-18 13:59:45 -08:00
media
Merge tag 'media/v6.1-4' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media
2022-12-09 10:45:51 -08:00
memory
memory: renesas-rpc-if: Clear HS bit during hardware initialization
2022-12-31 13:31:48 +01:00
memstick
…
message
…
mfd
Revert "mfd: syscon: Remove repetition of the regmap_get_val_endian()"
2022-10-23 12:04:56 -07:00
misc
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
2022-11-09 15:40:03 +01:00
mmc
mmc: sdhci-sprd: Fix no reset data and command after voltage switch
2022-12-01 11:28:39 +01:00
most
…
mtd
mtd: onenand: omap2: add dependency on GPMC
2022-11-07 16:53:04 +01:00
mux
…
net
igb: Initialize mailbox message for VF reset
2022-12-21 17:48:10 +01:00
nfc
nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION
2022-11-23 20:01:50 -08:00
ntb
…
nubus
…
nvdimm
Merge tag 'libnvdimm-for-6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm
2022-10-14 18:41:41 -07:00
nvme
Merge tag 'block-6.1-2022-12-08' of git://git.kernel.dk/linux
2022-12-08 15:53:39 -08:00
nvmem
nvmem: lan9662-otp: Change return type of lan9662_otp_wait_flag_clear()
2022-11-22 18:22:05 +01:00
of
of: property: decrement node refcount in of_fwnode_get_reference_args()
2022-11-22 17:22:52 -06:00
opp
…
parisc
parisc: Export iosapic_serial_irq() symbol for serial port driver
2022-10-27 09:12:05 +02:00
parport
parport_pc: Avoid FIFO port location truncation
2022-11-09 15:40:32 +01:00
pci
PCI: mt7621: Add sentinel to quirks table
2022-12-21 17:48:02 +01:00
pcmcia
pcmcia: remove AT91RM9200 Compact Flash driver
2022-09-27 08:12:16 +02:00
peci
…
perf
drivers/perf: hisi: Fix some event id for hisi-pcie-pmu
2022-12-31 13:31:53 +01:00
phy
phy: ralink: mt7621-pci: add sentinel to quirks table
2022-11-05 13:01:25 +05:30
pinctrl
pinctrl: intel: Save and restore pins in "direct IRQ" mode
2022-11-28 21:41:31 +01:00
platform
platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register()
2022-12-31 13:32:00 +01:00
pnp
PNP: fix name memory leak in pnp_alloc_dev()
2022-12-31 13:31:56 +01:00
power
power: supply: ab8500: Defer thermal zone probe
2022-11-01 01:00:32 +01:00
powercap
Merge tag 'sched-core-2022-10-07' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2022-10-10 09:10:28 -07:00
pps
…
ps3
…
ptp
] ptp: ocp: remove symlink for second GNSS
2022-10-10 08:37:24 +01:00
pwm
Merge tag 'pwm/for-6.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm
2022-10-07 11:32:10 -07:00
rapidio
rapidio: fix possible UAF when kfifo_alloc() fails
2022-12-31 13:32:00 +01:00
ras
…
regulator
Merge tag 'regulator-fix-v6.1-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator
2022-11-25 13:54:48 -08:00
remoteproc
remoteproc: virtio: Fix warning on bindings by removing the of_match_table
2022-10-05 09:20:44 -06:00
reset
Merge tag 'clk-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux
2022-10-08 10:06:48 -07:00
rpmsg
rpmsg: char: Avoid double destroy of default endpoint
2022-09-21 11:21:33 -06:00
rtc
rtc: cmos: fix build on non-ACPI platforms
2022-10-18 22:36:54 +02:00
s390
s390/qeth: fix use-after-free in hsci
2022-12-08 09:12:56 -08:00
sbus
…
scsi
Merge tag 'hyperv-fixes-signed-20221125' of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux
2022-11-25 12:32:42 -08:00
sh
…
siox
siox: fix possible memory leak in siox_device_add()
2022-11-09 15:40:14 +01:00
slimbus
slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m
2022-11-10 18:45:40 +01:00
soc
soc: apple: rtkit: Stop casting function pointer signatures
2022-12-31 13:31:53 +01:00
soundwire
soundwire: qcom: check for outanding writes before doing a read
2022-10-28 17:00:38 +05:30
spi
Merge tag 'spi-fix-v6.1-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi
2022-11-23 11:19:06 -08:00
spmi
spmi: pmic-arb: increase SPMI transaction timeout delay
2022-09-30 14:33:23 +02:00
ssb
ssb: gpio: Use generic_handle_irq_safe()
2022-09-19 15:08:38 +02:00
staging
staging: r8188eu: fix led register settings
2022-12-21 17:48:09 +01:00
target
scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
2022-11-17 17:46:16 +00:00
tc
…
tee
tee: optee: fix possible memory leak in optee_register_device()
2022-11-17 09:22:12 +01:00
thermal
thermal: core: fix some possible name leaks in error paths
2022-12-31 13:31:57 +01:00
thunderbolt
treewide: use get_random_u32() when possible
2022-10-11 17:42:58 -06:00
tty
Merge tag 'tty-6.1-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty
2022-11-18 10:59:52 -08:00
ufs
scsi: ufs: core: Fix typo in comment
2022-10-22 03:29:32 +00:00
uio
…
usb
usb: musb: remove extra check in musb_gadget_vbus_draw
2022-12-31 13:31:47 +01:00
vdpa
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2022-10-10 14:02:53 -07:00
vfio
vfio/pci: Check the device set open count on reset
2022-11-10 12:03:36 -07:00
vhost
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2022-10-10 14:02:53 -07:00
video
Merge tag 'drm-misc-fixes-2022-11-24' of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes
2022-11-25 09:21:11 +10:00
virt
virt/sev-guest: Prevent IV reuse in the SNP guest driver
2022-11-21 11:03:40 +01:00
virtio
virtio_pci: use irq to detect interrupt support
2022-10-13 09:33:03 -04:00
vlynq
…
w1
Merge tag 'char-misc-6.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2022-10-08 08:56:37 -07:00
watchdog
Merge tag 'linux-watchdog-6.1-rc4' of git://www.linux-watchdog.org/linux-watchdog
2022-11-01 12:21:53 -07:00
xen
xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
2022-12-31 13:31:59 +01:00
zorro
…
Kconfig
…
Makefile
…