iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ff69bb4be64398adf129b8d5dce1c93de58bfa49
linux/drivers
History
YueHaibing 2ff783f3e0 ppp: deflate: Fix possible crash in deflate_init 
[ Upstream commit 3ebe1bca58 ]

BUG: unable to handle kernel paging request at ffffffffa018f000
PGD 3270067 P4D 3270067 PUD 3271063 PMD 2307eb067 PTE 0
Oops: 0000 [#1] PREEMPT SMP
CPU: 0 PID: 4138 Comm: modprobe Not tainted 5.1.0-rc7+ #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
rel-1.9.3-0-ge2fc41e-prebuilt.qemu-project.org 04/01/2014
RIP: 0010:ppp_register_compressor+0x3e/0xd0 [ppp_generic]
Code: 98 4a 3f e2 48 8b 15 c1 67 00 00 41 8b 0c 24 48 81 fa 40 f0 19 a0
75 0e eb 35 48 8b 12 48 81 fa 40 f0 19 a0 74
RSP: 0018:ffffc90000d93c68 EFLAGS: 00010287
RAX: ffffffffa018f000 RBX: ffffffffa01a3000 RCX: 000000000000001a
RDX: ffff888230c750a0 RSI: 0000000000000000 RDI: ffffffffa019f000
RBP: ffffc90000d93c80 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffffa0194080
R13: ffff88822ee1a700 R14: 0000000000000000 R15: ffffc90000d93e78
FS:  00007f2339557540(0000) GS:ffff888237a00000(0000)
knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffa018f000 CR3: 000000022bde4000 CR4: 00000000000006f0
Call Trace:
 ? 0xffffffffa01a3000
 deflate_init+0x11/0x1000 [ppp_deflate]
 ? 0xffffffffa01a3000
 do_one_initcall+0x6c/0x3cc
 ? kmem_cache_alloc_trace+0x248/0x3b0
 do_init_module+0x5b/0x1f1
 load_module+0x1db1/0x2690
 ? m_show+0x1d0/0x1d0
 __do_sys_finit_module+0xc5/0xd0
 __x64_sys_finit_module+0x15/0x20
 do_syscall_64+0x6b/0x1d0
 entry_SYSCALL_64_after_hwframe+0x49/0xbe

If ppp_deflate fails to register in deflate_init,
module initialization failed out, however
ppp_deflate_draft may has been regiestred and not
unregistered before return.
Then the seconed modprobe will trigger crash like this.

Reported-by: Hulk Robot <hulkci@huawei.com>
Signed-off-by: YueHaibing <yuehaibing@huawei.com>
Acked-by: Guillaume Nault <gnault@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-06-11 12:23:43 +02:00
..
accessibility
…
acpi
ACPI / SBS: Fix GPE storm on recent MacBookPro's
2019-04-27 09:33:58 +02:00
amba
ARM: amba: Don't read past the end of sysfs "driver_override" buffer
2018-05-02 07:53:42 -07:00
android
binder: add missing binder_unlock()
2018-02-28 10:17:23 +01:00
ata
libata: fix using DMA buffers on stack
2019-05-16 19:44:59 +02:00
atm
atm: he: fix sign-extension overflow on large shift
2019-03-23 08:44:16 +01:00
auxdisplay
…
base
x86/speculation/mds: Add sysfs reporting for MDS
2019-05-16 19:45:14 +02:00
bcma
…
block
xsysace: Fix error handling in ace_setup
2019-05-16 19:45:02 +02:00
bluetooth
Revert "Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV"
2018-11-27 16:08:01 +01:00
bus
bus: brcmstb_gisb: correct support for 64-bit address output
2018-04-13 19:50:05 +02:00
cdrom
cdrom: Fix race condition in cdrom_sysctl_register
2019-04-27 09:33:52 +02:00
char
ipmi:ssif: compare block number correctly for multi-part return messages
2019-06-11 12:23:39 +02:00
clk
clk: ingenic: Fix round_rate misbehaving with non-integer dividers
2019-03-23 08:44:36 +01:00
clocksource
clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
2019-03-23 08:44:35 +01:00
connector
…
cpufreq
cpufreq: pxa2xx: remove incorrect __init annotation
2019-03-23 08:44:36 +01:00
cpuidle
cpuidle: big.LITTLE: fix refcount leak
2019-02-20 10:13:09 +01:00
crypto
crypto: vmx - fix copy-paste error in CTR mode
2019-06-11 12:23:35 +02:00
dca
…
devfreq
PM / devfreq: tegra: fix error return code in tegra_devfreq_probe()
2018-11-10 07:41:40 -08:00
dio
…
dma
dmaengine: tegra: avoid overflow of byte tracking
2019-04-27 09:33:53 +02:00
dma-buf
…
edac
EDAC, i7core: Fix memleaks and use-after-free on probe and remove
2018-10-10 08:52:06 +02:00
eisa
…
extcon
extcon: usb-gpio: Don't miss event during suspend/resume
2019-04-03 06:23:18 +02:00
firewire
firewire-ohci: work around oversized DMA reads on JMicron controllers
2018-05-30 07:48:52 +02:00
firmware
efi: stub: define DISABLE_BRANCH_PROFILING for all architectures
2019-04-03 06:23:20 +02:00
fmc
…
fpga
…
gpio
gpio: gpio-omap: fix level interrupt idling
2019-04-27 09:33:48 +02:00
gpu
gpu: ipu-v3: dp: fix CSC handling
2019-05-16 19:45:07 +02:00
hid
HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
2019-05-16 19:45:05 +02:00
hsi
HSI: ssi_protocol: double free in ssip_pn_xmit()
2018-03-24 10:58:42 +01:00
hv
Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels
2019-01-13 10:05:27 +01:00
hwmon
hwmon: (lm80) Fix missing unlock on error in set_fan_div()
2019-02-23 09:05:13 +01:00
hwspinlock
…
hwtracing
intel_th: gth: Fix an off-by-one in output unassigning
2019-05-16 19:44:51 +02:00
i2c
i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
2019-04-27 09:33:47 +02:00
ide
ide: pmac: add of_node_put()
2018-12-21 14:09:52 +01:00
idle
idle: i7300: add PCI dependency
2018-02-25 11:03:51 +01:00
iio
iio: adc: xilinx: fix potential use-after-free on remove
2019-05-16 19:45:05 +02:00
infiniband
IB/mlx4: Fix race condition between catas error reset and aliasguid flows
2019-04-27 09:33:56 +02:00
input
Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ
2019-05-16 19:45:03 +02:00
iommu
iommu/amd: Set exclusion range correctly
2019-05-16 19:45:04 +02:00
ipack
…
irqchip
irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable
2019-03-23 08:44:27 +01:00
isdn
mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
2019-04-03 06:23:25 +02:00
leds
leds: lp55xx: fix null deref on firmware load failure
2019-04-27 09:33:51 +02:00
lguest
…
lightnvm
…
macintosh
macintosh/via-pmu: Add missing mmio accessors
2018-09-19 22:48:57 +02:00
mailbox
…
mcb
…
md
bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
2019-06-11 12:23:39 +02:00
media
media: v4l2: i2c: ov7670: Fix PLL bypass register values
2019-05-16 19:45:03 +02:00
memory
memory: tegra: Apply interrupts mask per SoC
2018-08-06 16:24:38 +02:00
memstick
memstick: Prevent memstick host from getting runtime suspended during card detection
2019-02-20 10:13:09 +01:00
message
scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
2018-05-30 07:48:58 +02:00
mfd
mfd: mc13xxx: Fix a missing check of a register-read failure
2019-03-23 08:44:16 +01:00
misc
misc: vexpress: Off by one in vexpress_syscfg_exec()
2019-02-20 10:13:18 +01:00
mmc
mmc: davinci: remove extraneous __init annotation
2019-04-27 09:33:56 +02:00
mtd
mtd: rawnand: gpmi: fix MX28 bus master lockup problem
2019-02-20 10:13:17 +01:00
net
ppp: deflate: Fix possible crash in deflate_init
2019-06-11 12:23:43 +02:00
nfc
NFC: nxp-nci: Include unaligned.h instead of access_ok.h
2019-02-20 10:13:20 +01:00
ntb
ntb_transport: Fix bug with max_mw_size parameter
2018-05-30 07:48:55 +02:00
nubus
…
nvdimm
libnvdimm/btt: Fix a kmemdup failure check
2019-05-16 19:45:05 +02:00
nvme
nvme-pci: initialize queue memory before interrupts
2018-07-11 16:03:47 +02:00
nvmem
…
of
of: add helper to lookup compatible child node
2018-12-01 09:46:35 +01:00
oprofile
…
parisc
parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode
2018-05-30 07:49:10 +02:00
parport
parport_pc: fix find_superio io compare code, should use equal test.
2019-03-23 08:44:37 +01:00
pci
PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
2019-04-27 09:33:56 +02:00
pcmcia
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
2018-11-21 09:27:30 +01:00
perf
drivers/perf: arm_pmu: handle no platform_device
2018-03-22 09:23:26 +01:00
phy
phy: work around 'phys' references to usb-nop-xceiv devices
2018-01-23 19:50:16 +01:00
pinctrl
pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
2019-03-23 08:44:33 +01:00
platform
platform/x86: sony-laptop: Fix unintentional fall-through
2019-05-16 19:45:05 +02:00
pnp
…
power
power: supply: olpc_battery: correct the temperature units
2019-01-13 10:05:34 +01:00
powercap
PowerCap: Fix an error code in powercap_register_zone()
2018-04-13 19:50:05 +02:00
pps
…
ps3
…
ptp
ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl
2019-02-20 10:13:05 +01:00
pwm
pwm: tiehrpwm: Fix disabling of output of PWMs
2018-09-09 20:04:35 +02:00
rapidio
…
ras
…
regulator
regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
2019-04-27 09:33:53 +02:00
remoteproc
…
reset
…
rpmsg
…
rtc
rtc: da9063: set uie_unsupported when relevant
2019-05-16 19:45:01 +02:00
s390
s390: ctcm: fix ctcm_new_device error return code
2019-05-16 19:45:06 +02:00
sbus
drivers/sbus/char: add of_node_put()
2018-12-21 14:09:52 +01:00
scsi
scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
2019-05-16 19:45:04 +02:00
sfi
…
sh
…
sn
…
soc
soc/tegra: fuse: Fix illegal free of IO base address
2019-04-27 09:33:52 +02:00
spi
spi: bcm2835: Unbreak the build of esoteric configs
2019-01-13 10:05:31 +01:00
spmi
…
ssb
ssb: mark ssb_bus_register as __maybe_unused
2018-02-25 11:03:44 +01:00
staging
staging: iio: adt7316: fix the dac write calculation
2019-05-16 19:45:02 +02:00
target
scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
2019-03-23 08:44:35 +01:00
tc
TC: Set DMA masks for devices
2018-11-21 09:27:36 +01:00
thermal
thermal/int340x_thermal: fix mode setting
2019-04-27 09:33:57 +02:00
thunderbolt
thunderbolt: Resume control channel after hibernation image is created
2018-04-24 09:32:07 +02:00
tty
tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
2019-06-11 12:23:37 +02:00
uio
uio: Fix an Oops on load
2018-11-27 16:08:02 +01:00
usb
USB: serial: fix unthrottle races
2019-05-16 19:45:16 +02:00
uwb
uwb: hwa-rc: fix memory leak at probe
2018-10-10 08:52:04 +02:00
vfio
vfio/pci: use correct format characters
2019-05-16 19:45:01 +02:00
vhost
vhost: make sure used idx is seen before log in vhost_add_used_n()
2019-01-13 10:05:28 +01:00
video
fbdev: fbmem: fix memory access if logo is bigger than the screen
2019-04-27 09:33:51 +02:00
virt
drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
2019-05-16 19:45:18 +02:00
virtio
virtio_balloon: fix another race between migration and ballooning
2018-08-06 16:24:42 +02:00
vlynq
…
vme
…
w1
USB: w1 ds2490: Fix bug caused by improper use of altsetting array
2019-05-16 19:45:00 +02:00
watchdog
watchdog: f71808e_wdt: Fix magic close handling
2018-05-30 07:49:03 +02:00
xen
xen: xlate_mmu: add missing header to fix 'W=1' warning
2018-12-17 21:55:11 +01:00
zorro
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:49:11 +02:00
Kconfig
…
Makefile
usb: build drivers/usb/common/ when USB_SUPPORT is set
2018-02-25 11:03:38 +01:00