Heikki Krogerus 0d67e0fa16 device property: fix for a case of use-after-free ...

In device_remove_property_set(), the secondary fwnode needs
to be cleared before the pset is freed. This fixes a
use-after-free when a property set is providing the primary
fwnode.

As a result of the fix, the primary fwnode may end up
containing ERR_PTR(-ENODEV), so also adding checks for it to
the property handling code.

Reported-by: John Youn <John.Youn@synopsys.com>
Signed-off-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>

2016-03-10 21:33:16 +01:00

..

power

Merge branches 'pm-core' and 'pm-domains'

2016-02-06 00:34:01 +01:00

regmap

regmap: mmio: Revert to v4.4 endianness handling

2016-02-05 11:22:04 +00:00

attribute_container.c

attribute_container: fix missing blank lines after declarations

2015-03-25 14:35:09 +01:00

base.h

PM / sleep: prohibit devices probing during suspend/hibernation

2015-11-30 14:47:22 +01:00

bus.c

driver-core: add asynchronous probing support for drivers

2015-05-20 00:25:24 -07:00

cacheinfo.c

cpu/cacheinfo: Fix teardown path

2015-09-17 06:06:54 -07:00

class.c

class_find_device: fix reference to argument "match"

2015-09-29 15:23:14 +02:00

component.c

component: remove device from master match list on failed add

2016-02-11 09:42:09 +00:00

container.c

ACPI / hotplug / driver core: Handle containers in a special way

2013-12-29 15:25:48 +01:00

core.c

driver core: Do not overwrite secondary fwnode with NULL if it is set

2015-12-07 02:29:23 +01:00

cpu.c

drivers/base/cpu.c: use __cpu_*_mask directly

2016-01-20 17:09:18 -08:00

dd.c

driver core: Avoid NULL pointer dereferences in device_is_bound()

2016-01-12 01:51:44 +01:00

devcoredump.c

devcoredump: provide a one-way disable function

2014-11-26 19:40:12 -08:00

devres.c

devm: make allocations numa aware by default

2015-10-09 17:00:33 -04:00

devtmpfs.c

wrappers for ->i_mutex access

2016-01-22 18:04:28 -05:00

dma-coherent.c

drivers: dma-coherent: add initialization from device tree

2014-10-14 02:18:12 +02:00

dma-contiguous.c

driver core update for 4.4-rc1

2015-11-04 21:50:37 -08:00

dma-mapping.c

dma-mapping: remove <asm-generic/dma-coherent.h>

2016-01-20 17:09:18 -08:00

driver.c

driver core: add missing blank line after declaration

2015-03-25 14:36:30 +01:00

firmware_class.c

firmware: actually return NULL on failed request_firmware_nowait()

2016-01-07 13:45:34 -07:00

firmware.c

…

hypervisor.c

…

init.c

drivers: of/base: move of_init to driver_init

2015-05-26 19:55:56 -07:00

isa.c

…

Kconfig

cma: make default CMA area size zero for x86

2014-12-10 17:41:06 -08:00

Makefile

drivers/base: Add MSI domain support for non-PCI devices

2015-07-30 00:14:38 +02:00

map.c

drivers: base: map: Use kmalloc_array instead of kmalloc

2015-03-25 14:35:08 +01:00

memory.c

mm: skip memory block registration for ZONE_DEVICE

2016-01-15 17:56:32 -08:00

module.c

…

node.c

Revert "mm: Check if section present during memory block (un)registering"

2015-10-13 10:57:25 -07:00

pinctrl.c

drivers/pinctrl: Add the concept of an "init" state

2015-10-27 11:24:23 +01:00

platform-msi.c

base: Export platform_msi_domain_[alloc,free]_irqs

2016-01-26 16:33:25 +01:00

platform.c

base/platform: Fix platform drivers with no probe callback

2016-01-26 08:47:25 -08:00

property.c

device property: fix for a case of use-after-free

2016-03-10 21:33:16 +01:00

soc.c

base: soc: siplify ida usage

2015-10-04 19:42:22 +01:00

syscore.c

genirq: Simplify wakeup mechanism

2014-09-01 13:48:59 +02:00

topology.c

sched/topology: Rename topology_thread_cpumask() to topology_sibling_cpumask()

2015-05-27 15:22:15 +02:00

transport_class.c

…