shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-03-25 12:00:22 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
e1bf31b76cbd4406b045fd39dac242563e8cae32
linux/drivers
History
Tetsuo Handa 4e772cfd1a misc: vmw_vmci: explicitly initialize vmci_datagram payload 
commit b2192cfeba upstream.

KMSAN complains that vmci_check_host_caps() left the payload part of
check_msg uninitialized.

  =====================================================
  BUG: KMSAN: uninit-value in kmsan_check_memory+0xd/0x10
  CPU: 1 PID: 1 Comm: swapper/0 Tainted: G    B             5.11.0-rc7+ #4
  Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 02/27/2020
  Call Trace:
   dump_stack+0x21c/0x280
   kmsan_report+0xfb/0x1e0
   kmsan_internal_check_memory+0x202/0x520
   kmsan_check_memory+0xd/0x10
   iowrite8_rep+0x86/0x380
   vmci_guest_probe_device+0xf0b/0x1e70
   pci_device_probe+0xab3/0xe70
   really_probe+0xd16/0x24d0
   driver_probe_device+0x29d/0x3a0
   device_driver_attach+0x25a/0x490
   __driver_attach+0x78c/0x840
   bus_for_each_dev+0x210/0x340
   driver_attach+0x89/0xb0
   bus_add_driver+0x677/0xc40
   driver_register+0x485/0x8e0
   __pci_register_driver+0x1ff/0x350
   vmci_guest_init+0x3e/0x41
   vmci_drv_init+0x1d6/0x43f
   do_one_initcall+0x39c/0x9a0
   do_initcall_level+0x1d7/0x259
   do_initcalls+0x127/0x1cb
   do_basic_setup+0x33/0x36
   kernel_init_freeable+0x29a/0x3ed
   kernel_init+0x1f/0x840
   ret_from_fork+0x1f/0x30

  Uninit was created at:
   kmsan_internal_poison_shadow+0x5c/0xf0
   kmsan_slab_alloc+0x8d/0xe0
   kmem_cache_alloc+0x84f/0xe30
   vmci_guest_probe_device+0xd11/0x1e70
   pci_device_probe+0xab3/0xe70
   really_probe+0xd16/0x24d0
   driver_probe_device+0x29d/0x3a0
   device_driver_attach+0x25a/0x490
   __driver_attach+0x78c/0x840
   bus_for_each_dev+0x210/0x340
   driver_attach+0x89/0xb0
   bus_add_driver+0x677/0xc40
   driver_register+0x485/0x8e0
   __pci_register_driver+0x1ff/0x350
   vmci_guest_init+0x3e/0x41
   vmci_drv_init+0x1d6/0x43f
   do_one_initcall+0x39c/0x9a0
   do_initcall_level+0x1d7/0x259
   do_initcalls+0x127/0x1cb
   do_basic_setup+0x33/0x36
   kernel_init_freeable+0x29a/0x3ed
   kernel_init+0x1f/0x840
   ret_from_fork+0x1f/0x30

  Bytes 28-31 of 36 are uninitialized
  Memory access of size 36 starts at ffff8881675e5f00
  =====================================================

Fixes: 1f16643991 ("VMCI: guest side driver implementation.")
Cc: <stable@vger.kernel.org>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Link: https://lore.kernel.org/r/20210402121742.3917-2-penguin-kernel@I-love.SAKURA.ne.jp
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-05-22 10:40:21 +02:00
..
accessibility
…
acpi
ACPI: custom_method: fix a possible memory leak
2021-05-22 10:40:15 +02:00
amba
amba: Fix resource leak for drivers without .remove
2021-03-03 17:44:38 +01:00
android
binder: Prevent context manager from incrementing ref 0
2020-08-21 11:01:55 +02:00
ata
ata: ahci_brcm: Add back regulators management
2021-03-03 17:44:35 +01:00
atm
atm: idt77252: fix null-ptr-dereference
2021-03-30 14:41:39 +02:00
auxdisplay
auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
2018-02-13 12:35:55 +01:00
base
Revert "device property: Keep secondary firmware node secondary by type"
2021-01-12 19:49:05 +01:00
bcma
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
2020-01-29 10:24:31 +01:00
block
xen-blkback: don't leak persistent grants from xen_blkbk_map()
2021-03-30 14:41:43 +02:00
bluetooth
Bluetooth: btusb: fix PM leak in error case of setup
2020-01-12 11:24:16 +01:00
bus
bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
2021-03-30 14:41:40 +02:00
cdrom
cdrom: respect device capabilities during opening action
2020-01-04 13:41:02 +01:00
char
parisc: parisc-agp requires SBA IOMMU driver
2021-04-16 11:59:07 +02:00
clk
clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
2021-05-22 10:40:17 +02:00
clocksource
clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
2021-03-03 17:44:37 +01:00
connector
…
cpufreq
cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()
2021-01-17 13:57:54 +01:00
cpuidle
cpuidle: Fix three reference count leaks
2020-06-20 10:24:18 +02:00
crypto
crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
2020-12-29 13:44:55 +01:00
dax
device-dax: implement ->split() to catch invalid munmap attempts
2018-02-28 10:18:33 +01:00
dca
…
devfreq
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
2020-10-01 20:40:02 +02:00
dio
…
dma
dmaengine: dw: Make it dependent to HAS_IOMEM
2021-04-28 12:07:14 +02:00
dma-buf
dma-buf: Fix memory leak in sync_file_merge()
2019-12-21 10:42:32 +01:00
edac
EDAC/i5100: Fix error handling order in i5100_init_one()
2020-10-29 09:05:32 +01:00
eisa
…
extcon
extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged
2021-05-22 10:40:17 +02:00
firewire
firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
2021-04-07 12:05:40 +02:00
firmware
efi: Make it possible to disable efivar_ssdt entirely
2020-07-09 09:35:57 +02:00
fmc
…
fpga
…
gpio
gpio: pcf857x: Fix missing first interrupt
2021-03-03 17:44:44 +01:00
gpu
drm/amdgpu: fix NULL pointer dereference
2021-05-22 10:40:18 +02:00
hid
HID: alps: fix error return code in alps_input_configured()
2021-04-28 12:07:16 +02:00
hsi
HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
2020-12-29 13:44:56 +01:00
hv
Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
2020-09-23 08:46:15 +02:00
hwmon
hwmon: (lm90) Fix max6658 sporadic wrong temperature reading
2021-03-17 16:10:18 +01:00
hwspinlock
…
hwtracing
intel_th: Consistency and off-by-one fix
2021-05-22 10:40:16 +02:00
i2c
i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition
2021-03-03 17:44:40 +01:00
ide
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2020-09-12 11:47:36 +02:00
idle
x86/cpu: Sanitize FAM6_ATOM naming
2019-05-14 19:19:34 +02:00
iio
iio: hid-sensor-prox: Fix scale not correct issue
2021-04-16 11:59:05 +02:00
infiniband
RDMA/cxgb4: check for ipv6 address properly while destroying listener
2021-04-16 11:59:08 +02:00
input
Input: i8042 - fix Pegatron C15B ID entry
2021-04-28 12:07:15 +02:00
iommu
iommu/amd: Fix sleeping in atomic in increase_address_space()
2021-03-11 13:48:03 +01:00
ipack
…
irqchip
irqchip/alpine-msi: Fix freeing of interrupts on allocation error path
2020-12-29 13:45:00 +01:00
isdn
mISDN: fix crash in fritzpci
2021-04-10 13:04:44 +02:00
leds
leds: trigger: fix potential deadlock with libata
2021-02-03 23:19:50 +01:00
lguest
…
lightnvm
…
macintosh
drivers/macintosh: Fix memleak in windfarm_pm112 driver
2020-06-20 10:24:21 +02:00
mailbox
mailbox: handle failed named mailbox channel request
2019-08-04 09:33:41 +02:00
mcb
MCB: add support for SC31 to mcb-lpc
2017-09-09 17:39:41 +02:00
md
dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
2021-05-22 10:40:20 +02:00
media
media: dvbdev: Fix memory leak in dvb_media_device_free()
2021-05-22 10:40:19 +02:00
memory
memory: emif: Remove bogus debugfs error handling
2020-11-10 10:23:55 +01:00
memstick
memstick: r592: Fix error return in r592_probe()
2020-12-29 13:44:58 +01:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2020-11-10 10:23:57 +01:00
mfd
mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
2021-03-03 17:44:38 +01:00
misc
misc: vmw_vmci: explicitly initialize vmci_datagram payload
2021-05-22 10:40:21 +02:00
mmc
mmc: core: Set read only for SD cards with permanent write protect bit
2021-05-22 10:40:15 +02:00
mtd
mtd: spi-nor: hisi-sfc: Put child node np on error path
2021-03-03 17:44:43 +01:00
net
FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
2021-05-22 10:40:20 +02:00
nfc
nfc: s3fwrn5: Release the nfc firmware
2020-12-29 13:45:00 +01:00
ntb
NTB: hw: amd: fix an issue about leak system resources
2020-10-29 09:05:41 +01:00
nubus
…
nvdimm
libnvdimm/dimm: Avoid race between probe and available_slots_show()
2021-03-03 17:44:44 +01:00
nvme
nvmet: don't check iosqes,iocqes for discovery controllers
2021-03-24 10:59:23 +01:00
nvmem
nvmem: qfprom: remove incorrect write support
2020-06-11 09:22:22 +02:00
of
of/fdt: Make sure no-map does not remove already reserved regions
2021-03-03 17:44:37 +01:00
oprofile
…
parisc
parisc: mask out enable and reserved bits from sba imask
2020-08-21 11:02:06 +02:00
parport
parport: load lowlevel driver if ports not found
2020-01-04 13:39:55 +01:00
pci
PCI: PM: Do not read power state in pci_enable_device_flags()
2021-05-22 10:40:16 +02:00
pcmcia
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
2018-11-13 11:16:46 -08:00
perf
drivers/perf: arm_pmu: Fix failure path in PM notifier
2019-08-06 18:29:41 +02:00
phy
phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
2021-05-22 10:40:16 +02:00
pinctrl
pinctrl: rockchip: fix restore error in resume
2021-04-07 12:05:40 +02:00
platform
platform/x86: thinkpad_acpi: Correct thermal sensor allocation
2021-05-22 10:40:15 +02:00
pnp
…
power
power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove()
2021-05-22 10:40:18 +02:00
powercap
powercap: restrict energy meter to root access
2020-11-10 21:04:57 +01:00
pps
drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
2019-08-04 09:33:45 +02:00
ps3
powerpc/ps3: use dma_mapping_error()
2020-12-29 13:45:00 +01:00
ptp
ptp: free ptp device pin descriptors properly
2020-05-20 08:15:33 +02:00
pwm
pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()
2021-03-03 17:44:39 +01:00
rapidio
rapidio: fix the missed put_device() for rio_mport_add_riodev
2020-10-29 09:05:39 +01:00
ras
…
regulator
regulator: axp20x: Fix reference cout leak
2021-03-03 17:44:37 +01:00
remoteproc
remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load
2021-02-23 13:59:14 +01:00
reset
reset: Fix potential use-after-free in __of_reset_control_get()
2019-11-25 09:53:42 +01:00
rpmsg
rpmsg: smd: fix memory leak on channel create
2018-11-13 11:17:03 -08:00
rtc
rtc: rx8010: don't modify the global rtc ops
2020-11-10 10:23:59 +01:00
s390
s390/dasd: fix hanging DASD driver unbind
2021-03-17 16:10:15 +01:00
sbus
drivers/sbus/char: add of_node_put()
2018-12-21 14:11:36 +01:00
scsi
scsi: libfc: Fix a format specifier
2021-05-22 10:40:18 +02:00
sfi
…
sh
…
sn
…
soc
soc/fsl: qbman: fix conflicting alignment attributes
2021-04-16 11:59:08 +02:00
spi
spi: omap-100k: Fix reference leak to master
2021-05-22 10:40:16 +02:00
spmi
spmi: Include OF based modalias in device uevent
2017-07-27 15:08:08 -07:00
ssb
ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
2019-05-31 06:48:12 -07:00
staging
staging: rtl8192e: Change state information from u16 to u8
2021-04-07 12:05:41 +02:00
target
scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
2021-05-22 10:40:17 +02:00
tc
TC: Set DMA masks for devices
2018-11-13 11:17:02 -08:00
thermal
thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430
2020-09-12 11:47:34 +02:00
thunderbolt
thunderbolt: Use 32-bit writes when writing ring producer/consumer
2019-11-06 12:18:14 +01:00
tty
vt/consolemap: do font sum unsigned
2021-03-07 11:25:57 +01:00
uio
uio_pdrv_genirq: fix use without device tree and no interrupt
2020-07-22 09:10:53 +02:00
usb
usb: gadget/function/f_fs string table fix for multiple languages
2021-05-22 10:40:20 +02:00
uwb
uwb: hwa-rc: fix memory leak at probe
2018-10-03 17:01:42 -07:00
vfio
vfio/pci: Move dummy_resources_list init in vfio_pci_probe()
2021-01-09 13:35:48 +01:00
vhost
vhost: Fix vhost_vq_reset()
2021-04-07 12:05:39 +02:00
video
fbdev: zero-fill colormap in fbcmap.c
2021-05-22 10:40:16 +02:00
virt
drivers/virt/fsl_hypervisor: Fix error handling path
2020-10-29 09:05:35 +01:00
virtio
virtio_ring: Avoid loop when vq is broken in virtqueue_poll
2020-08-26 10:29:05 +02:00
vlynq
…
vme
vme: bridges: reduce stack usage
2020-02-28 15:42:33 +01:00
w1
w1: mxc_w1: Fix timeout resolution problem leading to bus error
2020-11-10 10:23:57 +01:00
watchdog
watchdog: qcom: Avoid context switch in restart handler
2020-12-29 13:45:01 +01:00
xen
xen/events: fix setting irq affinity
2021-04-16 11:59:12 +02:00
zorro
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:50:44 +02:00
Kconfig
…
Makefile
usb: build drivers/usb/common/ when USB_SUPPORT is set
2018-02-25 11:05:45 +01:00