iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/edac
History
Borislav Petkov 251c54ea26 EDAC/ghes: Check whether the driver is on the safe list correctly 
With CONFIG_DEBUG_TEST_DRIVER_REMOVE=y, a system would try to probe,
unregister and probe again a driver.

When ghes_edac is attempted to be loaded on a system which is not on
the safe platforms list, ghes_edac_register() would return early. The
unregister counterpart ghes_edac_unregister() would still attempt to
unregister and exit early at the refcount test, leading to the refcount
underflow below.

In order to not do *anything* on the unregister path too, reuse the
force_load parameter and check it on that path too, before fumbling with
the refcount.

  ghes_edac: ghes_edac_register: entry
  ghes_edac: ghes_edac_register: return -ENODEV
  ------------[ cut here ]------------
  refcount_t: underflow; use-after-free.
  WARNING: CPU: 10 PID: 1 at lib/refcount.c:28 refcount_warn_saturate+0xb9/0x100
  Modules linked in:
  CPU: 10 PID: 1 Comm: swapper/0 Not tainted 5.9.0-rc4+ #12
  Hardware name: GIGABYTE MZ01-CE1-00/MZ01-CE1-00, BIOS F02 08/29/2018
  RIP: 0010:refcount_warn_saturate+0xb9/0x100
  Code: 82 e8 fb 8f 4d 00 90 0f 0b 90 90 c3 80 3d 55 4c f5 00 00 75 88 c6 05 4c 4c f5 00 01 90 48 c7 c7 d0 8a 10 82 e8 d8 8f 4d 00 90 <0f> 0b 90 90 c3 80 3d 30 4c f5 00 00 0f 85 61 ff ff ff c6 05 23 4c
  RSP: 0018:ffffc90000037d58 EFLAGS: 00010292
  RAX: 0000000000000026 RBX: ffff88840b8da000 RCX: 0000000000000000
  RDX: 0000000000000001 RSI: ffffffff8216b24f RDI: 00000000ffffffff
  RBP: ffff88840c662e00 R08: 0000000000000001 R09: 0000000000000001
  R10: 0000000000000001 R11: 0000000000000046 R12: 0000000000000000
  R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
  FS:  0000000000000000(0000) GS:ffff88840ee80000(0000) knlGS:0000000000000000
  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
  CR2: 0000000000000000 CR3: 0000800002211000 CR4: 00000000003506e0
  Call Trace:
   ghes_edac_unregister
   ghes_remove
   platform_drv_remove
   really_probe
   driver_probe_device
   device_driver_attach
   __driver_attach
   ? device_driver_attach
   ? device_driver_attach
   bus_for_each_dev
   bus_add_driver
   driver_register
   ? bert_init
   ghes_init
   do_one_initcall
   ? rcu_read_lock_sched_held
   kernel_init_freeable
   ? rest_init
   kernel_init
   ret_from_fork
   ...
  ghes_edac: ghes_edac_unregister: FALSE, refcount: -1073741824

Signed-off-by: Borislav Petkov <bp@suse.de>
Link: https://lkml.kernel.org/r/20200911164950.GB19320@zn.tnic
2020-09-15 09:42:15 +02:00
..
altera_edac.c
EDAC/altera: Use the Altera System Manager driver
2019-11-22 10:18:29 +01:00
altera_edac.h
edac: altera: Move Stratix10 SDRAM ECC to peripheral
2019-07-25 14:28:42 -04:00
amd64_edac_dbg.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
amd64_edac_inj.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
amd64_edac.c
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
amd64_edac.h
EDAC/amd64: Add AMD family 17h model 60h PCI IDs
2020-05-22 18:43:13 +02:00
amd76x_edac.c
EDAC: Get rid of mci->mod_ver
2017-07-17 13:42:48 +02:00
amd8111_edac.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 333
2019-06-05 17:37:06 +02:00
amd8111_edac.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 333
2019-06-05 17:37:06 +02:00
amd8131_edac.c
EDAC/amd8131: Remove defined but not used bridge_str
2020-04-24 09:08:47 +02:00
amd8131_edac.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 333
2019-06-05 17:37:06 +02:00
armada_xp_edac.c
EDAC/armada_xp: Fix some log messages
2020-04-14 11:28:09 +02:00
aspeed_edac.c
EDAC/aspeed: Remove unneeded semicolon
2019-12-19 07:27:09 +01:00
bluefield_edac.c
EDAC, mellanox: Add ECC support for BlueField DDR4
2019-08-08 12:57:01 -03:00
cell_edac.c
edac: rename edac_core.h to edac_mc.h
2016-12-15 08:54:51 -02:00
cpc925_edac.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 333
2019-06-05 17:37:06 +02:00
debugfs.c
ARM: 8892/1: EDAC: Add missing debugfs_create_x32 wrapper
2019-08-29 07:58:01 +01:00
dmc520_edac.c
EDAC: Add EDAC driver for DMC520
2020-02-19 21:00:27 +01:00
e7xxx_edac.c
EDAC: Get rid of mci->mod_ver
2017-07-17 13:42:48 +02:00
e752x_edac.c
EDAC: Fix indentation issues in several EDAC drivers
2018-11-10 16:56:16 +01:00
edac_device_sysfs.c
EDAC: Fix reference count leaks
2020-06-17 15:38:35 +02:00
edac_device.c
EDAC/device: Rework error logging API
2019-10-09 13:01:42 +02:00
edac_device.h
EDAC/device: Rework error logging API
2019-10-09 13:01:42 +02:00
edac_mc_sysfs.c
EDAC/mc: Remove per layer counters
2020-02-17 13:37:00 +01:00
edac_mc.c
EDAC/mc: Call edac_inc_ue_error() before panic
2020-06-15 11:19:52 -07:00
edac_mc.h
EDAC/mc: Determine mci pointer from the error descriptor
2020-02-17 13:05:10 +01:00
edac_module.c
treewide: Fix function prototypes for module_param_call()
2017-10-31 15:30:37 +01:00
edac_module.h
EDAC/mc: Change mci device removal to use put_device()
2020-02-17 12:32:44 +01:00
edac_pci_sysfs.c
EDAC: Fix reference count leaks
2020-06-17 15:38:35 +02:00
edac_pci.c
Replace <asm/uaccess.h> with <linux/uaccess.h> globally
2016-12-24 11:46:01 -08:00
edac_pci.h
edac: move documentation from edac_pci*.c to edac_pci.h
2016-12-15 08:54:51 -02:00
fsl_ddr_edac.c
EDAC, fsl_ddr: Add LS1021A to the list of supported hardware
2018-12-19 11:57:45 +01:00
fsl_ddr_edac.h
EDAC, fsl_ddr: Add LS1021A to the list of supported hardware
2018-12-19 11:57:45 +01:00
ghes_edac.c
EDAC/ghes: Check whether the driver is on the safe list correctly
2020-09-15 09:42:15 +02:00
highbank_l2_edac.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 201
2019-05-30 11:29:52 -07:00
highbank_mc_edac.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 201
2019-05-30 11:29:52 -07:00
i7core_edac.c
EDAC/{i7core,sb,pnd2,skx}: Fix error event severity
2020-08-18 15:40:30 +02:00
i10nm_base.c
EDAC, {skx,i10nm}: Use CPU stepping macro to pass configurations
2020-06-15 14:50:39 -07:00
i3000_edac.c
remove ioremap_nocache and devm_ioremap_nocache
2020-01-06 09:45:59 +01:00
i3200_edac.c
remove ioremap_nocache and devm_ioremap_nocache
2020-01-06 09:45:59 +01:00
i5000_edac.c
EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function
2019-11-09 10:32:32 +01:00
i5100_edac.c
EDAC: remove set but not used variable 'ecc_loc'
2019-12-16 13:54:02 -08:00
i5400_edac.c
EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function
2019-11-09 10:32:32 +01:00
i7300_edac.c
EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function
2019-11-09 10:32:32 +01:00
i82443bxgx_edac.c
EDAC: Get rid of mci->mod_ver
2017-07-17 13:42:48 +02:00
i82860_edac.c
EDAC: Get rid of mci->mod_ver
2017-07-17 13:42:48 +02:00
i82875p_edac.c
EDAC: Get rid of mci->mod_ver
2017-07-17 13:42:48 +02:00
i82975x_edac.c
remove ioremap_nocache and devm_ioremap_nocache
2020-01-06 09:45:59 +01:00
ie31200_edac.c
EDAC/ie31200: Fallback if host bridge device is already initialized
2020-08-10 11:13:06 -07:00
Kconfig
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
layerscape_edac.c
edac: rename edac_core.h to edac_mc.h
2016-12-15 08:54:51 -02:00
Makefile
EDAC: Add EDAC driver for DMC520
2020-02-19 21:00:27 +01:00
mce_amd.c
x86/mce, EDAC/mce_amd: Print PPIN in machine check records
2020-06-23 17:27:53 +02:00
mce_amd.h
x86/mce/amd, edac: Remove report_gart_errors
2020-04-14 15:53:46 +02:00
mpc85xx_edac.c
EDAC, mpc85xx: Add T2080 l2-cache support
2017-02-03 10:36:35 +01:00
mpc85xx_edac.h
EDAC, fsl-ddr: Separate FSL DDR driver from MPC85xx
2016-09-01 10:28:00 +02:00
mv64x60_edac.c
EDAC, mv64x60: Fix an error handling path
2018-01-09 20:14:23 +01:00
mv64x60_edac.h
…
octeon_edac-l2c.c
edac: rename edac_core.h to edac_mc.h
2016-12-15 08:54:51 -02:00
octeon_edac-lmc.c
EDAC, octeon: Fix an uninitialized variable warning
2017-11-27 11:57:26 +01:00
octeon_edac-pc.c
edac: rename edac_core.h to edac_mc.h
2016-12-15 08:54:51 -02:00
octeon_edac-pci.c
edac: rename edac_core.h to edac_mc.h
2016-12-15 08:54:51 -02:00
pasemi_edac.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 333
2019-06-05 17:37:06 +02:00
pnd2_edac.c
treewide: Use fallthrough pseudo-keyword
2020-08-23 17:36:59 -05:00
pnd2_edac.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 288
2019-06-05 17:36:37 +02:00
ppc4xx_edac.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
ppc4xx_edac.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
qcom_edac.c
EDAC, qcom_edac: Remove irq_handled local variable
2018-11-06 12:03:16 +01:00
r82600_edac.c
EDAC: Get rid of mci->mod_ver
2017-07-17 13:42:48 +02:00
sb_edac.c
EDAC/{i7core,sb,pnd2,skx}: Fix error event severity
2020-08-18 15:40:30 +02:00
sifive_edac.c
A garden variety of small fixes all over the place.
2020-01-27 09:16:22 -08:00
skx_base.c
EDAC, {skx,i10nm}: Use CPU stepping macro to pass configurations
2020-06-15 14:50:39 -07:00
skx_common.c
EDAC/{i7core,sb,pnd2,skx}: Fix error event severity
2020-08-18 15:40:30 +02:00
skx_common.h
Merge branches 'edac-i10nm' and 'edac-misc' into edac-updates-for-5.8
2020-06-01 11:39:15 +02:00
synopsys_edac.c
EDAC/synopsys: Do not dump uninitialized pinf->col
2020-03-17 14:32:31 +01:00
thunderx_edac.c
EDAC/thunderx: Make symbols static
2020-04-23 12:07:24 +02:00
ti_edac.c
EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function
2019-11-09 10:32:32 +01:00
wq.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
x38_edac.c
remove ioremap_nocache and devm_ioremap_nocache
2020-01-06 09:45:59 +01:00
xgene_edac.c
EDAC/xgene: Remove set but not used address local var
2020-04-14 14:35:19 +02:00