iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Cristian Marussi 928240c368 firmware: arm_scmi: Fix device node validation for mailbox transport 
commit 2ab4f4018cb6b8010ca5002c3bdc37783b5d28c2 upstream.

When mailboxes are used as a transport it is possible to setup the SCMI
transport layer, depending on the underlying channels configuration, to use
one or two mailboxes, associated, respectively, to one or two, distinct,
shared memory areas: any other combination should be treated as invalid.

Add more strict checking of SCMI mailbox transport device node descriptors.

Fixes: 5c8a47a5a91d ("firmware: arm_scmi: Make scmi core independent of the transport type")
Cc: <stable@vger.kernel.org> # 4.19
Signed-off-by: Cristian Marussi <cristian.marussi@arm.com>
Link: https://lore.kernel.org/r/20230307162324.891866-1-cristian.marussi@arm.com
Signed-off-by: Sudeep Holla <sudeep.holla@arm.com>
[Cristian: backported to v5.4]
Signed-off-by: Cristian Marussi <cristian.marussi@arm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-04-05 11:16:46 +02:00
..
accessibility
…
acpi
ACPI: video: Fix Lenovo Ideapad Z570 DMI match
2023-03-11 16:43:56 +01:00
amba
…
android
binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
2022-12-08 11:23:01 +01:00
ata
ata: libata: Fix sata_down_spd_limit() when no link speed is reported
2023-02-22 12:50:24 +01:00
atm
atm: idt77252: fix kmemleak when rmmod idt77252
2023-04-05 11:16:37 +02:00
auxdisplay
…
base
driver core: Fix test_async_probe_init saves device in wrong array
2023-02-06 07:52:40 +01:00
bcma
…
block
block: sunvdc: add check for mdesc_grab() returning NULL
2023-03-22 13:28:06 +01:00
bluetooth
Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work
2023-04-05 11:16:38 +02:00
bus
bus: imx-weim: fix branch condition evaluates to a garbage value
2023-04-05 11:16:42 +02:00
cdrom
…
char
ipmi:watchdog: Set panic count to proper value on a panic
2023-03-17 08:32:53 +01:00
clk
clk: HI655X: select REGMAP instead of depending on it
2023-03-22 13:28:03 +01:00
clocksource
clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled
2023-01-18 11:40:56 +01:00
connector
…
counter
counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update
2023-01-18 11:41:24 +01:00
cpufreq
cpufreq: armada-37xx: stop using 0 as NULL pointer
2023-02-06 07:52:41 +01:00
cpuidle
cpuidle: dt: Return the correct numbers of parsed idle states
2023-01-18 11:40:53 +01:00
crypto
crypto: crypto4xx - Call dma_unmap_page when done
2023-03-11 16:43:42 +01:00
dax
…
dca
…
devfreq
PM/devfreq: governor: Add a private governor_data for governor
2023-01-18 11:41:52 +01:00
dio
drivers: dio: fix possible memory leak in dio_init()
2023-01-18 11:41:21 +01:00
dma
dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
2023-03-03 11:41:48 +01:00
dma-buf
udmabuf: Set the DMA mask for the udmabuf device (v2)
2022-09-05 10:27:45 +02:00
edac
EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
2023-02-06 07:52:44 +01:00
eisa
…
extcon
extcon: Modify extcon device to be created after driver data is set
2022-06-14 18:12:00 +02:00
firewire
firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
2023-02-22 12:50:22 +01:00
firmware
firmware: arm_scmi: Fix device node validation for mailbox transport
2023-04-05 11:16:46 +02:00
fpga
fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
2023-02-22 12:50:28 +01:00
fsi
WRITE is "data source", not destination...
2023-02-22 12:50:23 +01:00
gnss
…
gpio
gpio: vf610: connect GPIO label to dev name
2023-03-11 16:43:47 +01:00
gpu
drm/etnaviv: fix reference leak when mmaping imported buffer
2023-04-05 11:16:45 +02:00
greybus
…
hid
HID: uhid: Over-ride the default maximum data buffer value with our own
2023-03-22 13:28:10 +01:00
hsi
HSI: omap_ssi_core: Fix error handling in ssi_init()
2023-01-18 11:41:28 +01:00
hv
Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
2022-12-08 11:22:58 +01:00
hwmon
hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
2023-04-05 11:16:38 +02:00
hwspinlock
…
hwtracing
intel_th: pci: Add Meteor Lake-P support
2022-08-25 11:18:13 +02:00
i2c
i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
2023-04-05 11:16:41 +02:00
i3c
…
ide
…
idle
intel_idle: Disable IBRS during long idle
2022-10-07 09:16:55 +02:00
iio
iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()
2023-03-11 16:44:15 +01:00
infiniband
IB/hfi1: Assign npages earlier
2023-03-03 11:41:48 +01:00
input
Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
2023-04-05 11:16:45 +02:00
interconnect
interconnect: fix mem leak when freeing nodes
2023-03-22 13:28:08 +01:00
iommu
dma-mapping: drop the dev argument to arch_sync_dma_for_*
2023-04-05 11:16:43 +02:00
ipack
…
irqchip
irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
2023-03-11 16:43:43 +01:00
isdn
mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
2023-01-18 11:41:32 +01:00
leds
…
lightnvm
…
macintosh
macintosh: windfarm: Use unsigned type for 1-bit bitfields
2023-03-17 08:32:52 +01:00
mailbox
mailbox: zynq-ipi: fix error handling while device_register() fails
2023-01-18 11:41:33 +01:00
mcb
mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
2023-01-18 11:41:25 +01:00
md
md: avoid signed overflow in slot_store()
2023-04-05 11:16:42 +02:00
media
media: m5mols: fix off-by-one loop termination error
2023-03-22 13:28:07 +01:00
memory
memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()
2023-02-06 07:52:34 +01:00
memstick
memstick/ms_block: Fix a memory leak
2022-08-25 11:17:55 +02:00
message
…
mfd
mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
2023-03-11 16:44:13 +01:00
misc
mei: bus-fixup:upon error print return values of send and receive
2023-03-11 16:44:14 +01:00
mmc
mmc: atmel-mci: fix race between stop command and start of next command
2023-03-22 13:28:07 +01:00
mtd
mtd: rawnand: meson: invalidate cache on polling ECC bit
2023-04-05 11:16:43 +02:00
mux
…
net
xen/netback: don't do grant copy across page boundary
2023-04-05 11:16:45 +02:00
nfc
nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
2023-03-22 13:28:05 +01:00
ntb
NTB: ntb_tool: uninitialized heap data in tool_fn_write()
2022-08-25 11:18:26 +02:00
nubus
…
nvdimm
nvdimm: Fix badblocks clear off-by-one error
2022-07-07 17:36:48 +02:00
nvme
nvmet: avoid potential UAF in nvmet_req_complete()
2023-03-22 13:28:06 +01:00
nvmem
nvmem: core: fix cell removal on error
2023-02-22 12:50:28 +01:00
of
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
2023-01-18 11:41:14 +01:00
opp
OPP: fix error checking in opp_migrate_dentry()
2023-03-11 16:43:41 +01:00
oprofile
…
parisc
parisc: led: Fix potential null-ptr-deref in start_task()
2023-01-18 11:41:50 +01:00
parport
parport_pc: Avoid FIFO port location truncation
2022-11-25 17:42:14 +01:00
pci
PCI: Unify delay handling for reset and resume
2023-03-22 13:28:09 +01:00
pcmcia
…
perf
perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
2023-01-18 11:40:50 +01:00
phy
phy: rockchip-typec: Fix unsigned comparison with less than zero
2023-03-11 16:44:15 +01:00
pinctrl
pinctrl: at91-pio4: fix domain name assignment
2023-04-05 11:16:45 +02:00
platform
platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
2023-04-05 11:16:38 +02:00
pnp
PNP: fix name memory leak in pnp_alloc_dev()
2023-01-18 11:40:54 +01:00
power
power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
2023-04-05 11:16:36 +02:00
powercap
powercap: fix possible name leak in powercap_register_zone()
2023-03-11 16:43:40 +01:00
pps
…
ps3
…
ptp
ptp_qoriq: fix memory leak in probe()
2023-04-05 11:16:43 +02:00
pwm
pwm: stm32-lp: fix the check on arr and cmp registers update
2023-03-11 16:44:08 +01:00
rapidio
rapidio: devices: fix missing put_device in mport_cdev_open
2023-01-18 11:40:59 +01:00
ras
…
regulator
regulator: Handle deferred clk
2023-04-05 11:16:44 +02:00
remoteproc
remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
2023-03-11 16:43:52 +01:00
reset
…
rpmsg
rpmsg: glink: Avoid infinite loop on intent for missing channel
2023-03-11 16:43:53 +01:00
rtc
rtc: sun6i: Always export the internal oscillator
2023-03-11 16:44:13 +01:00
s390
s390/vfio-ap: fix memory leak in vfio_ap device driver
2023-04-05 11:16:44 +02:00
sbus
…
scsi
scsi: megaraid_sas: Fix crash after a double completion
2023-04-05 11:16:43 +02:00
sfi
…
sh
…
siox
siox: fix possible memory leak in siox_device_add()
2022-11-25 17:42:14 +01:00
slimbus
slimbus: stream: correct presence rate frequencies
2022-11-25 17:42:17 +01:00
soc
ARM: ux500: do not directly dereference __iomem
2023-01-18 11:41:46 +01:00
soundwire
soundwire: bus_type: fix remove and shutdown support
2022-08-25 11:17:54 +02:00
spi
spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
2023-03-11 16:43:47 +01:00
spmi
spmi: pmic-arb: correct duplicate APID to PPID mapping logic
2022-10-26 13:22:43 +02:00
ssb
…
staging
staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
2023-03-13 10:18:25 +01:00
target
scsi: target: iscsi: Fix an error message in iscsi_check_key()
2023-04-05 11:16:39 +02:00
tc
…
tee
tee: optee: fix possible memory leak in optee_register_device()
2022-12-08 11:22:57 +01:00
thermal
thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
2023-03-11 16:44:13 +01:00
thunderbolt
thunderbolt: Use const qualifier for ring_interrupt_index
2023-04-05 11:16:39 +02:00
tty
hvc/xen: prevent concurrent accesses to the shared ring
2023-04-05 11:16:38 +02:00
uio
uio: uio_dmem_genirq: Fix deadlock between irq config and handling
2023-01-18 11:41:22 +01:00
usb
usb: chipidea: core: fix possible concurrent when switch role
2023-04-05 11:16:41 +02:00
vfio
vfio: platform: Do not pass return buffer to ACPI _RST method
2023-01-18 11:41:22 +01:00
vhost
vhost: fix range used in translate_desc()
2023-01-18 11:41:57 +01:00
video
fbdev: au1200fb: Fix potential divide by zero
2023-04-05 11:16:43 +02:00
virt
vboxguest: Do not use devm for irq
2022-08-25 11:18:33 +02:00
virtio
virtio_mmio: Restore guest page size on resume
2022-07-21 20:59:24 +02:00
visorbus
…
vlynq
…
vme
vme: Fix error not catched in fake_init()
2023-01-18 11:41:26 +01:00
w1
w1: fix WARNING after calling w1_process()
2023-02-06 07:52:40 +01:00
watchdog
watchdog: pcwd_usb: Fix attempting to access uninitialized memory
2023-03-11 16:44:11 +01:00
xen
dma-mapping: drop the dev argument to arch_sync_dma_for_*
2023-04-05 11:16:43 +02:00
zorro
…
Kconfig
…
Makefile
…