Bjorn Helgaas 8bb98f7cae agp/hp: fixup hp agp after ACPI changes ...

commit 67fe63b071 upstream.

Commit 15b8dd53f5 changed the string in info->hardware_id from a static
array to a pointer and added a length field.  But instead of changing
"sizeof(array)" to "length", we changed it to "sizeof(length)" (== 4),
which corrupts the string we're trying to null-terminate.

We no longer even need to null-terminate the string, but we *do* need to
check whether we found a HID.  If there's no HID, we used to have an empty
array, but now we have a null pointer.

The combination of these defects causes this oops:

  Unable to handle kernel NULL pointer dereference (address 0000000000000003)
  modprobe[895]: Oops 8804682956800 [1]
  ip is at zx1_gart_probe+0xd0/0xcc0 [hp_agp]

  http://marc.info/?l=linux-ia64&m=126264484923647&w=2

Signed-off-by: Bjorn Helgaas <bjorn.helgaas@hp.com>
Reported-by: Émeric Maschino <emeric.maschino@gmail.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2010-04-26 07:41:32 -07:00

..

agp

agp/hp: fixup hp agp after ACPI changes

2010-04-26 07:41:32 -07:00

hw_random

move virtrng_remove to .devexit.text

2009-10-22 16:39:34 +10:30

ip2

tty: rewrite the ldisc locking

2009-06-11 08:51:01 -07:00

ipmi

headers: remove sched.h from poll.h

2009-10-04 15:05:10 -07:00

mwave

mwave: fix read buffer overflow

2009-09-24 07:21:03 -07:00

pcmcia

pcmcia: fix read buffer overflow

2009-09-22 07:17:42 -07:00

rio

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

tpm

tpm_tis: TPM_STS_DATA_EXPECT workaround

2010-03-15 08:49:42 -07:00

xilinx_hwicap

const: constify remaining file_operations

2009-10-01 16:11:11 -07:00

.gitignore

[MIPS] Remove IT8172-based platforms, ITE 8172G and Globespan IVR support.

2006-10-03 17:59:17 +01:00

amiserial.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

apm-emulation.c

const: constify remaining file_operations

2009-10-01 16:11:11 -07:00

applicom.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

applicom.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

bfin_jtag_comm.c

bfin_jtag_comm: clean up printk usage

2009-06-22 11:32:23 -07:00

bfin-otp.c

const: constify remaining file_operations

2009-10-01 16:11:11 -07:00

briq_panel.c

briq_panel: BKL pushdown

2008-06-20 14:05:55 -06:00

bsr.c

powerpc/BSR: Fix BSR to allow mmap of small BSR on 64k kernel

2009-06-26 14:37:26 +10:00

cd1865.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ChangeLog

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

consolemap.c

consolemap: indentation & braces disagree - reindent

2009-01-06 15:59:30 -08:00

cp437.uni

unicode table for cp437

2008-12-13 11:25:49 -08:00

cs5535_gpio.c

Add a bunch of cycle_kernel_lock() calls

2008-06-20 14:05:53 -06:00

cyclades.c

cyclades: fix read buffer overflow

2009-10-01 16:11:16 -07:00

defkeymap.c_shipped

Fix default compose table initialization

2008-03-03 14:53:16 -08:00

defkeymap.map

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

digi1.h

[PATCH] Clean up the old digi support and rescue it

2005-09-07 16:57:20 -07:00

digiFep1.h

[PATCH] Clean up the old digi support and rescue it

2005-09-07 16:57:20 -07:00

digiPCI.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ds1302.c

rtc: use bcd2bin/bin2bcd

2008-10-20 08:52:41 -07:00

ds1620.c

[ARM] netwinder: clean up GPIO naming

2008-12-13 09:12:07 +00:00

dsp56k.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

dtlk.c

headers: remove sched.h from poll.h

2009-10-04 15:05:10 -07:00

efirtc.c

drivers/char/efirtc.c: removed duplicated #include

2008-08-04 16:59:56 -07:00

epca.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

epca.h

epca: use tty_port

2008-07-20 17:12:36 -07:00

epcaconfig.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

esp.c

serial: move delta_msr_wait into the tty_port

2009-09-19 13:13:31 -07:00

generic_nvram.c

powerpc/nvram: Enable use Generic NVRAM driver for different size chips

2009-09-11 16:02:11 +10:00

generic_serial.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

genrtc.c

headers: Fix build after <linux/sched.h> removal

2009-10-13 10:20:16 -07:00

hangcheck-timer.c

drivers/char/: Spelling fixes

2008-02-03 17:11:42 +02:00

hpet.c

hpet: hpet driver periodic timer setup bug fixes

2009-09-24 07:21:03 -07:00

hvc_beat.c

powerpc/cell: Use correct types in beat files

2009-01-08 16:25:16 +11:00

hvc_console.c

hvc_console: Provide (un)locked version for hvc_resize()

2009-09-24 15:12:47 +10:00

hvc_console.h

hvc_console: Provide (un)locked version for hvc_resize()

2009-09-24 15:12:47 +10:00

hvc_irq.c

hvc_console: Call free_irq() only if request_irq() was successful

2009-01-13 14:48:01 +11:00

hvc_iseries.c

drivers/hvc: Add missing __devexit_p()

2009-06-16 14:15:44 +10:00

hvc_iucv.c

hvc_console: Provide (un)locked version for hvc_resize()

2009-09-24 15:12:47 +10:00

hvc_rtas.c

[POWERPC] hvc_rtas_init() must be __init

2008-02-14 22:11:02 +11:00

hvc_udbg.c

powerpc: udbg-based backend for hvc_console

2008-11-19 16:04:25 +11:00

hvc_vio.c

hvc_console: Add __init and __exit to hvc_vio

2009-08-28 14:24:11 +10:00

hvc_xen.c

xen/hvc: make sure console output is always emitted, with explicit polling

2009-11-03 11:05:51 -08:00

hvcs.c

Merge commit 'origin/master' into next

2009-06-18 11:16:55 +10:00

hvsi.c

powerpc/hvsi: Avoid calculating possibly-invalid address

2009-08-20 10:29:28 +10:00

i8k.c

i8k: Add Dell Vostro systems

2009-01-02 10:28:32 -08:00

isicom.c

isicom: split the open method for the isicom device

2009-09-19 13:13:27 -07:00

istallion.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

Kconfig

tty: Mark generic_serial users as BROKEN

2009-10-30 14:43:12 -07:00

keyboard.c

Input: keyboard - fix braille keyboard keysym generation

2009-11-25 23:05:17 -08:00

lp.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

Makefile

drivers/char/uv_mmtimer.c: add memory mapped RTC driver for UV

2009-09-24 07:21:03 -07:00

mbcs.c

[IA64] mbcs: fix printk format warnings

2009-09-15 08:42:00 -07:00

mbcs.h

MBCS: convert dmareadlock to mutex

2008-02-07 08:42:25 -08:00

mem.c

devmem: fix kmem write bug on memory holes

2010-02-23 07:37:54 -08:00

misc.c

seq_file: constify seq_operations

2009-09-23 07:39:29 -07:00

mmtimer.c

mmtimer: Push BKL down into the ioctl handler

2008-07-17 11:34:49 -07:00

moxa.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

moxa.h

Char: moxa, cleanup rx/tx

2008-04-30 08:29:43 -07:00

mspec.c

const: mark struct vm_struct_operations

2009-09-27 11:39:25 -07:00

mxser.c

tty: Char: mxser, use THRE for ASPP_OQUEUE ioctl

2009-09-19 13:13:38 -07:00

mxser.h

mxser: convert large macros to functions

2008-04-30 08:29:49 -07:00

n_hdlc.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

n_r3964.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

n_tty.c

n_tty: move echoctl check and clean up logic

2009-09-19 13:13:34 -07:00

nozomi.c

nozomi: quick fix for the close/close bug

2010-01-25 10:49:20 -08:00

nsc_gpio.c

[PATCH] struct path: convert char-drivers

2006-12-08 08:28:44 -08:00

nvram.c

[PATCH] nvram - convert PRINT_PROC to seq_file

2008-11-11 09:56:00 +00:00

nwbutton.c

[PATCH] Char: timers cleanup

2007-02-12 09:48:30 -08:00

nwbutton.h

IRQ: Maintain regs pointer globally rather than passing to IRQ handlers

2006-10-05 15:10:12 +01:00

nwflash.c

[ARM] netwinder: clean up GPIO naming

2008-12-13 09:12:07 +00:00

pc8736x_gpio.c

pc8736x_gpio: add support for PC87365 chips

2008-10-20 08:52:40 -07:00

ppdev.c

ppdev: reduce kernel log spam

2009-06-18 13:03:54 -07:00

ps3flash.c

ps3flash: Always read chunks of 256 KiB, and cache them

2009-06-15 16:47:27 +10:00

pty.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

random.c

random: Remove unused inode variable

2010-02-09 04:50:58 -08:00

raw.c

raw: fsync method is now required

2010-04-26 07:41:19 -07:00

riscom8_reg.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

riscom8.c

tty: riscom8, fix tty refcnt

2009-09-19 13:13:37 -07:00

riscom8.h

tty: add more tty_port fields

2008-07-20 17:12:38 -07:00

rocket_int.h

tty: rocketport uses different port flags to everyone else

2009-01-02 10:19:39 -08:00

rocket.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

rocket.h

tty: rocketport uses different port flags to everyone else

2009-01-02 10:19:39 -08:00

rtc.c

headers: Fix build after <linux/sched.h> removal

2009-10-13 10:20:16 -07:00

scc.h

m68k: atari - Rename "mfp" to "st_mfp"

2009-02-22 09:23:02 -08:00

scx200_gpio.c

Add a bunch of cycle_kernel_lock() calls

2008-06-20 14:05:53 -06:00

selection.c

tty: rewrite the ldisc locking

2009-06-11 08:51:01 -07:00

ser_a2232.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

ser_a2232.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ser_a2232fw.ax

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

ser_a2232fw.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

serial167.c

serial167: fix read buffer overflow

2009-10-01 16:11:16 -07:00

snsc_event.c

byteorder: don't directly include linux/byteorder/generic.h

2008-05-16 12:01:45 -07:00

snsc.c

device create: char: convert device_create_drvdata to device_create

2008-10-16 09:24:42 -07:00

snsc.h

Convert asm/semaphore.h users to linux/semaphore.h

2008-04-18 22:22:54 -04:00

sonypi.c

headers: Fix build after <linux/sched.h> removal

2009-10-13 10:20:16 -07:00

specialix_io8.h

tty: add more tty_port fields

2008-07-20 17:12:38 -07:00

specialix.c

specialix.c: convert nested spin_lock_irqsave to spin_lock

2009-07-20 16:38:43 -07:00

stallion.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

sx.c

headers: smp_lock.h redux

2009-07-12 12:22:34 -07:00

sx.h

Char: char/serial, remove SERIAL_TYPE_NORMAL redefines

2008-02-07 08:42:33 -08:00

sxboards.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

sxwindow.h

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

synclink_gt.c

hdlc: convert to netdev_tx_t

2009-09-01 01:13:31 -07:00

synclink.c

hdlc: convert to netdev_tx_t

2009-09-01 01:13:31 -07:00

synclinkmp.c

hdlc: convert to netdev_tx_t

2009-09-01 01:13:31 -07:00

sysrq.c

perf: Do the big rename: Performance Counters -> Performance Events

2009-09-21 14:28:04 +02:00

tb0219.c

Update Yoichi Yuasa's e-mail address

2009-07-03 15:45:29 +01:00

tlclk.c

headers: remove sched.h from interrupt.h

2009-10-11 11:20:58 -07:00

toshiba.c

toshiba: use ioremap_cached

2008-04-30 23:15:34 +02:00

tty_audit.c

tty: remove buffer special casing

2009-06-11 08:51:02 -07:00

tty_buffer.c

tty: Keep the default buffering to sub-page units

2010-04-01 15:58:30 -07:00

tty_io.c

tty: release_one_tty() forgets to put pids

2010-04-26 07:41:18 -07:00

tty_ioctl.c

tty: vt: use printk_once

2009-09-19 13:13:35 -07:00

tty_ldisc.c

tty: Fix the ldisc hangup race

2010-03-15 08:49:54 -07:00

tty_port.c

tty_port: handle the nonblocking open of a dead port corner case

2009-11-30 16:38:25 -08:00

uv_mmtimer.c

drivers/char/uv_mmtimer.c: add memory mapped RTC driver for UV

2009-09-24 07:21:03 -07:00

vc_screen.c

vc: create vcs(a) devices for consoles

2009-07-20 16:38:43 -07:00

viotape.c

tape: beyond ARRAY_SIZE of viocd_diskinfo

2009-06-02 10:32:34 +10:00

virtio_console.c

virtio: let header files include virtio_ids.h

2009-10-22 16:39:28 +10:30

vme_scc.c

m68k: vme_scc - Kill warn_unused_result warnings

2009-01-12 20:56:38 +01:00

vt_ioctl.c

vt: Fix use of "new" in a struct field

2009-11-19 13:43:06 -08:00

vt.c

tty: vt: use printk_once

2009-09-19 13:13:35 -07:00