iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6a8d648c8d
linux/drivers/misc/mei
History
Alexander Usyskin 6a8d648c8d mei: fix NULL dereferencing during FW initiated disconnection 
In the case when disconnection is initiated from the FW
the driver is flushing items from the write control list while
iterating over it:

mei_irq_write_handler()
    list_for_each_entry_safe(ctrl_wr_list)         <-- outer loop
         mei_cl_irq_disconnect_rsp()
             mei_cl_set_disconnected()
                 mei_io_list_flush(ctrl_wr_list)   <-- destorying list

We move the list flushing to the completion routine.

Cc: <stable@vger.kernel.org> #4.2+
Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2016-04-30 14:08:08 -07:00
..
amthif.c mei: fix format string in debug prints 2016-02-20 14:27:36 -08:00
bus-fixup.c mei: drop reserved host client ids 2016-02-07 14:47:20 -08:00
bus.c mei: do not pin module if cldrv->probe() failed 2016-04-30 14:08:08 -07:00
client.c mei: fix NULL dereferencing during FW initiated disconnection 2016-04-30 14:08:08 -07:00
client.h mei: split amthif client init from end of clients enumeration 2016-02-07 14:47:20 -08:00
debugfs.c mei: hbm: send immediate reply flag in enum request 2016-02-07 14:47:20 -08:00
hbm.c mei: fix NULL dereferencing during FW initiated disconnection 2016-04-30 14:08:08 -07:00
hbm.h mei: me: d0i3: add d0i3 enter/exit state machine 2015-08-03 17:33:55 -07:00
hw-me-regs.h mei: me: add broxton pci device ids 2016-03-01 16:53:32 -08:00
hw-me.c mei: trace pci configuration space io 2016-02-07 13:00:52 -08:00
hw-me.h mei: me: d0i3: enable d0i3 interrupts 2015-08-03 17:33:54 -07:00
hw-txe-regs.h mei: extract fw status registers 2014-05-03 19:21:22 -04:00
hw-txe.c mei: trace pci configuration space io 2016-02-07 13:00:52 -08:00
hw-txe.h mei: fix kernel-doc warnings 2014-09-29 11:56:02 -04:00
hw.h mei: hbm: send immediate reply flag in enum request 2016-02-07 14:47:20 -08:00
init.c mei: split amthif client init from end of clients enumeration 2016-02-07 14:47:20 -08:00
interrupt.c mei: fix NULL dereferencing during FW initiated disconnection 2016-04-30 14:08:08 -07:00
Kconfig mei: wd: drop the watchdog code from the core mei driver 2016-02-06 22:11:06 -08:00
main.c mei: fix format string in debug prints 2016-02-20 14:27:36 -08:00
Makefile mei: wd: drop the watchdog code from the core mei driver 2016-02-06 22:11:06 -08:00
mei_dev.h mei: drop global me_client_index 2016-04-30 14:08:08 -07:00
mei-trace.c mei: trace pci configuration space io 2016-02-07 13:00:52 -08:00
mei-trace.h mei: drop superfluous closing bracket from write traces 2016-02-07 14:47:20 -08:00
pci-me.c mei: me: add broxton pci device ids 2016-03-01 16:53:32 -08:00
pci-txe.c mei: call stop on failed char device register 2016-02-07 14:47:20 -08:00