shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-08 03:40:35 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
cb1083af7740f04820e70f412302c473644c8877
linux/drivers
History
Jia-Ju Bai cb1083af77 usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() 
[ Upstream commit 2337a77c1c ]

The driver may sleep in an interrupt handler.
The function call path (from bottom to top) in Linux-4.17 is:

[FUNC] fotg210_ep_queue(GFP_KERNEL)
drivers/usb/gadget/udc/fotg210-udc.c, 744:
	fotg210_ep_queue in fotg210_get_status
drivers/usb/gadget/udc/fotg210-udc.c, 768:
	fotg210_get_status in fotg210_setup_packet
drivers/usb/gadget/udc/fotg210-udc.c, 949:
	fotg210_setup_packet in fotg210_irq (interrupt handler)

To fix this bug, GFP_KERNEL is replaced with GFP_ATOMIC.
If possible, spin_unlock() and spin_lock() around fotg210_ep_queue()
can be also removed.

This bug is found by my static analysis tool DSAC.

Signed-off-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-11-25 09:53:23 +01:00
..
accessibility
…
acpi
PCI/ACPI: Correct error message for ASPM disabling
2019-11-25 09:52:26 +01:00
amba
…
android
ANDROID: binder: synchronize_rcu() when using POLLFREE.
2019-10-07 18:53:19 +02:00
ata
ata: ahci_brcm: Allow using driver or DSL SoCs
2019-11-25 09:53:22 +01:00
atm
Kconfig: Fix the reference to the IDT77105 Phy driver in the description of ATM_NICSTAR_USE_IDT77105
2019-09-21 07:14:13 +02:00
auxdisplay
…
base
component: fix loop condition to call unbind() if bind() fails
2019-11-25 09:52:23 +01:00
bcma
…
block
loop: Add LOOP_SET_DIRECT_IO to compat ioctl
2019-10-29 09:15:09 +01:00
bluetooth
Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto()
2019-11-16 10:29:34 +01:00
bus
bus: arm-cci: remove unnecessary unreachable()
2018-12-05 19:42:41 +01:00
cdrom
cdrom: Fix race condition in cdrom_sysctl_register
2019-04-05 22:29:12 +02:00
char
ipmi_si: Only schedule continuously in the thread in maintenance mode
2019-10-07 18:53:10 +02:00
clk
clk: at91: select parent if main oscillator or bypass is enabled
2019-10-07 18:53:14 +02:00
clocksource
clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
2019-08-04 09:33:22 +02:00
connector
…
cpufreq
cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
2019-10-29 09:15:25 +01:00
cpuidle
cpuidle: big.LITTLE: fix refcount leak
2019-02-12 19:44:55 +01:00
crypto
crypto: s5p-sss: Fix Fix argument list alignment
2019-11-25 09:53:01 +01:00
dax
…
dca
…
devfreq
PM / devfreq: passive: fix compiler warning
2019-10-05 12:30:29 +02:00
dio
…
dma
dmaengine: dma-jz4780: Further residue status fix
2019-11-25 09:52:11 +01:00
dma-buf
…
edac
EDAC/altera: Use the proper type for the IRQ status bits
2019-10-05 12:30:20 +02:00
eisa
…
extcon
extcon: arizona: Disable mic detect if running when driver is removed
2019-05-31 06:48:26 -07:00
firewire
…
firmware
efi/cper: Fix endianness of PCIe class code
2019-11-06 12:18:09 +01:00
fmc
…
fpga
…
gpio
gpio: max77620: Use correct unit for debounce times
2019-11-06 12:18:07 +01:00
gpu
drm/i915/cmdparser: Fix jump whitelist clearing
2019-11-12 19:16:24 +01:00
hid
HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring()
2019-11-12 19:15:55 +01:00
hsi
…
hv
Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels
2018-12-29 13:40:15 +01:00
hwmon
hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
2019-10-05 12:30:26 +02:00
hwspinlock
…
hwtracing
coresight: tmc: Fix byte-address alignment for RRP
2019-11-25 09:52:53 +01:00
i2c
i2c: riic: Clear NACK in tend isr
2019-10-05 12:30:36 +02:00
ide
ide: pmac: add of_node_put()
2018-12-21 14:11:37 +01:00
idle
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
iio
iio: dac: mcp4922: fix error handling in mcp4922_write_raw
2019-11-25 09:51:59 +01:00
infiniband
IB/iser: Fix possible NULL deref at iser_inv_desc()
2019-11-25 09:53:09 +01:00
input
Input: synaptics-rmi4 - destroy F54 poller workqueue when removing
2019-11-25 09:51:56 +01:00
iommu
iommu/amd: Silence warnings under memory pressure
2019-10-05 12:30:25 +02:00
ipack
…
irqchip
irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices
2019-10-05 12:30:10 +02:00
isdn
mISDN: enforce CAP_NET_RAW for raw sockets
2019-10-05 12:30:14 +02:00
leds
leds: leds-lp5562 allow firmware files up to the maximum length
2019-10-05 12:30:17 +02:00
lguest
…
lightnvm
…
macintosh
macintosh/rack-meter: Convert cputime64_t use to u64
2018-10-20 09:51:32 +02:00
mailbox
mailbox: handle failed named mailbox channel request
2019-08-04 09:33:41 +02:00
mcb
…
md
dm: Use kzalloc for all structs with embedded biosets/mempools
2019-11-06 12:18:01 +01:00
media
media: davinci: Fix implicit enum conversion warning
2019-11-25 09:52:48 +01:00
memory
memory: tegra: Fix integer overflow on tick value calculation
2019-05-25 18:26:49 +02:00
memstick
memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
2019-10-29 09:15:25 +01:00
message
…
mfd
mfd: intel-lpss: Remove D3cold delay
2019-10-07 18:53:16 +02:00
misc
misc: genwqe: should return proper error value.
2019-11-25 09:52:54 +01:00
mmc
mmc: sdhci-of-at91: fix quirk2 overwrite
2019-11-25 09:51:58 +01:00
mtd
mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword()
2019-10-05 12:30:07 +02:00
net
ath9k: fix reporting calculated new FFT upper max
2019-11-25 09:53:22 +01:00
nfc
NFC: st21nfca: fix double free
2019-11-12 19:15:40 +01:00
ntb
…
nubus
…
nvdimm
libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
2019-08-04 09:33:29 +02:00
nvme
nvmet: fix data units read and written counters in SMART log
2019-10-05 12:30:25 +02:00
nvmem
nvmem: core: return error code instead of NULL from nvmem_device_get
2019-11-25 09:52:16 +01:00
of
of: make PowerMac cache node search conditional on CONFIG_PPC_PMAC
2019-11-25 09:52:08 +01:00
oprofile
…
parisc
parisc: Disable HP HSC-PCI Cards to prevent kernel crash
2019-10-05 12:30:31 +02:00
parport
parport: Fix mem leak in parport_register_dev_model
2019-07-10 09:55:29 +02:00
pci
PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30
2019-11-12 19:15:54 +01:00
pcmcia
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
2018-11-13 11:16:46 -08:00
perf
drivers/perf: arm_pmu: Fix failure path in PM notifier
2019-08-06 18:29:41 +02:00
phy
phy: phy-twl4030-usb: fix denied runtime access
2019-11-25 09:52:50 +01:00
pinctrl
pinctrl: at91: don't use the same irqchip with multiple gpiochips
2019-11-25 09:52:20 +01:00
platform
platform/x86: intel_pmc_ipc: adding error handling
2019-06-22 08:17:16 +02:00
pnp
…
power
power: supply: twl4030_charger: disable eoc interrupt on linear charge
2019-11-25 09:52:32 +01:00
powercap
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
pps
drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
2019-08-04 09:33:45 +02:00
ps3
…
ptp
ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl
2019-02-12 19:44:52 +01:00
pwm
pwm: Fix deadlock warning when removing PWM device
2019-06-22 08:17:17 +02:00
rapidio
drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
2019-08-06 18:29:38 +02:00
ras
…
regulator
regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized
2019-11-10 11:23:09 +01:00
remoteproc
…
reset
reset: make device_reset_optional() really optional
2018-12-08 13:05:08 +01:00
rpmsg
rpmsg: smd: fix memory leak on channel create
2018-11-13 11:17:03 -08:00
rtc
rtc: pcf8523: set xtal load capacitance from DT
2019-11-06 12:18:04 +01:00
s390
s390/qeth: invoke softirqs after napi_schedule()
2019-11-25 09:52:25 +01:00
sbus
drivers/sbus/char: add of_node_put()
2018-12-21 14:11:36 +01:00
scsi
scsi: NCR5380: Handle BUS FREE during reselection
2019-11-25 09:53:05 +01:00
sfi
…
sh
…
sn
…
soc
soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
2019-06-22 08:17:15 +02:00
spi
spi: pic32: Use proper enum in dmaengine_prep_slave_rg
2019-11-25 09:52:43 +01:00
spmi
…
ssb
ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
2019-05-31 06:48:12 -07:00
staging
staging: rtl8188eu: fix null dereference when kzalloc fails
2019-11-06 12:18:06 +01:00
target
scsi: target: core: Do not overwrite CDB byte 1
2019-11-10 11:23:18 +01:00
tc
TC: Set DMA masks for devices
2018-11-13 11:17:02 -08:00
thermal
thermal: Fix use-after-free when unregistering thermal zone device
2019-10-17 13:42:12 -07:00
thunderbolt
thunderbolt: Use 32-bit writes when writing ring producer/consumer
2019-11-06 12:18:14 +01:00
tty
serial: mxs-auart: Fix potential infinite loop
2019-11-25 09:52:27 +01:00
uio
uio: Fix an Oops on load
2018-11-27 16:09:41 +01:00
usb
usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status()
2019-11-25 09:53:23 +01:00
uwb
uwb: hwa-rc: fix memory leak at probe
2018-10-03 17:01:42 -07:00
vfio
vfio/pci: Mask buggy SR-IOV VF INTx support
2019-11-25 09:52:55 +01:00
vhost
vhost: make sure log_num < in_num
2019-09-16 08:19:34 +02:00
video
fbdev: Ditch fb_edid_add_monspecs
2019-11-25 09:53:14 +01:00
virt
drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
2019-05-16 19:43:47 +02:00
virtio
virtio: Honour 'may_reduce_num' in vring_create_virtqueue
2019-04-17 08:36:47 +02:00
vlynq
…
vme
…
w1
w1: fix the resume command API
2019-05-31 06:48:15 -07:00
watchdog
watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout
2019-10-17 13:42:07 -07:00
xen
xen/pci: reserve MCFG areas earlier
2019-10-17 13:42:10 -07:00
zorro
…
Kconfig
…
Makefile
…