- Linux-stable-mirror - lists.linaro.org

patch "USB: serial: iuu_phoenix: fix DMA from stack" added to usb-linus

by gregkh＠linuxfoundation.org

This is a note to let you know that I've just added the patch titled USB: serial: iuu_phoenix: fix DMA from stack to my usb git tree which can be found at git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git in the usb-linus branch. The patch will show up in the next release of the linux-next tree (usually sometime within the next 24 hours during the week.) The patch will hopefully also be merged in Linus's tree for the next -rc kernel release. If you have any questions about this process, please let me know. >From 54d0a3ab80f49f19ee916def62fe067596833403 Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan(a)kernel.org> Date: Mon, 4 Jan 2021 15:50:07 +0100 Subject: USB: serial: iuu_phoenix: fix DMA from stack Stack-allocated buffers cannot be used for DMA (on all architectures) so allocate the flush command buffer using kmalloc(). Fixes: 60a8fc017103 ("USB: add iuu_phoenix driver") Cc: stable <stable(a)vger.kernel.org> # 2.6.25 Reviewed-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Johan Hovold <johan(a)kernel.org> --- drivers/usb/serial/iuu_phoenix.c | 20 +++++++++++++++----- 1 file changed, 15 insertions(+), 5 deletions(-) diff --git a/drivers/usb/serial/iuu_phoenix.c b/drivers/usb/serial/iuu_phoenix.c index f1201d4de297..e8f06b41a503 100644 --- a/drivers/usb/serial/iuu_phoenix.c +++ b/drivers/usb/serial/iuu_phoenix.c @@ -532,23 +532,29 @@ static int iuu_uart_flush(struct usb_serial_port *port) struct device *dev = &port->dev; int i; int status; - u8 rxcmd = IUU_UART_RX; + u8 *rxcmd; struct iuu_private *priv = usb_get_serial_port_data(port); if (iuu_led(port, 0xF000, 0, 0, 0xFF) < 0) return -EIO; + rxcmd = kmalloc(1, GFP_KERNEL); + if (!rxcmd) + return -ENOMEM; + + rxcmd[0] = IUU_UART_RX; + for (i = 0; i < 2; i++) { - status = bulk_immediate(port, &rxcmd, 1); + status = bulk_immediate(port, rxcmd, 1); if (status != IUU_OPERATION_OK) { dev_dbg(dev, "%s - uart_flush_write error\n", __func__); - return status; + goto out_free; } status = read_immediate(port, &priv->len, 1); if (status != IUU_OPERATION_OK) { dev_dbg(dev, "%s - uart_flush_read error\n", __func__); - return status; + goto out_free; } if (priv->len > 0) { @@ -556,12 +562,16 @@ static int iuu_uart_flush(struct usb_serial_port *port) status = read_immediate(port, priv->buf, priv->len); if (status != IUU_OPERATION_OK) { dev_dbg(dev, "%s - uart_flush_read error\n", __func__); - return status; + goto out_free; } } } dev_dbg(dev, "%s - uart_flush_read OK!\n", __func__); iuu_led(port, 0, 0xF000, 0, 0xFF); + +out_free: + kfree(rxcmd); + return status; } -- 2.30.0

4 years, 7 months

1
0
0 0

Linux 5.10.5

by Greg Kroah-Hartman

I'm announcing the release of the 5.10.5 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/gpu/todo.rst | 18 + Makefile | 2 arch/ia64/mm/init.c | 4 arch/powerpc/kernel/irq.c | 53 --- arch/powerpc/kernel/time.c | 9 arch/powerpc/platforms/powernv/opal.c | 2 arch/powerpc/sysdev/mpic_msgr.c | 2 arch/s390/kernel/entry.S | 12 arch/um/drivers/random.c | 101 +------ arch/um/drivers/ubd_kern.c | 191 ++++++++------ block/blk-pm.c | 15 - drivers/bluetooth/hci_h5.c | 8 drivers/char/hw_random/Kconfig | 16 - drivers/dax/bus.c | 44 +-- drivers/gpu/drm/amd/display/dc/clk_mgr/dcn21/rn_clk_mgr.c | 12 drivers/gpu/drm/amd/display/dc/dce/dce_link_encoder.c | 44 +++ drivers/gpu/drm/amd/display/dc/dce/dce_link_encoder.h | 2 drivers/i3c/master.c | 5 drivers/md/dm-verity-target.c | 12 drivers/md/raid10.c | 3 drivers/media/usb/dvb-usb/gp8psk.c | 2 drivers/misc/vmw_vmci/vmci_context.c | 2 drivers/opp/core.c | 9 drivers/rtc/rtc-pl031.c | 6 drivers/rtc/rtc-sun6i.c | 8 drivers/scsi/cxgbi/cxgb4i/Kconfig | 1 drivers/spi/Kconfig | 3 drivers/video/fbdev/core/fbcon.c | 45 --- drivers/watchdog/rti_wdt.c | 4 fs/bfs/inode.c | 2 fs/ceph/inode.c | 2 fs/ext4/mballoc.c | 9 fs/ext4/super.c | 40 +- fs/f2fs/checkpoint.c | 2 fs/f2fs/compress.c | 2 fs/f2fs/data.c | 58 +++- fs/f2fs/debug.c | 11 fs/f2fs/f2fs.h | 11 fs/f2fs/node.c | 29 +- fs/f2fs/node.h | 4 fs/f2fs/shrinker.c | 4 fs/f2fs/super.c | 9 fs/fcntl.c | 10 fs/io_uring.c | 91 ++++-- fs/jffs2/jffs2_fs_sb.h | 1 fs/jffs2/super.c | 17 - fs/namespace.c | 9 fs/nfs/nfs42xdr.c | 36 +- fs/nfs/nfs4super.c | 2 fs/nfs/pnfs.c | 33 ++ fs/nfs/pnfs.h | 5 fs/pnode.h | 2 fs/quota/quota_tree.c | 8 fs/reiserfs/stree.c | 6 include/linux/mm.h | 5 include/uapi/linux/const.h | 5 include/uapi/linux/ethtool.h | 2 include/uapi/linux/kernel.h | 9 include/uapi/linux/lightnvm.h | 2 include/uapi/linux/mroute6.h | 2 include/uapi/linux/netfilter/x_tables.h | 2 include/uapi/linux/netlink.h | 2 include/uapi/linux/sysctl.h | 2 kernel/cgroup/cgroup-v1.c | 2 kernel/module.c | 6 kernel/time/tick-sched.c | 7 lib/zlib_dfltcc/Makefile | 2 lib/zlib_dfltcc/dfltcc.c | 6 lib/zlib_dfltcc/dfltcc_deflate.c | 3 lib/zlib_dfltcc/dfltcc_inflate.c | 4 lib/zlib_dfltcc/dfltcc_syms.c | 17 - mm/hugetlb.c | 22 + mm/memory_hotplug.c | 2 mm/page_alloc.c | 8 net/ethtool/channels.c | 6 net/ethtool/strset.c | 2 net/mptcp/protocol.c | 2 net/sched/sch_taprio.c | 17 + sound/core/pcm_native.c | 9 sound/core/rawmidi.c | 49 ++- sound/core/seq/seq_queue.h | 8 tools/include/uapi/linux/const.h | 5 82 files changed, 710 insertions(+), 536 deletions(-) Anant Thazhemadam (2): Bluetooth: hci_h5: close serdev device and free hu in h5_close misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() Arnaldo Carvalho de Melo (1): tools headers UAPI: Sync linux/const.h with the kernel headers Baoquan He (1): mm: memmap defer init doesn't work as expected Bart Van Assche (1): scsi: block: Fix a race in the runtime power management code Boqun Feng (1): fcntl: Fix potential deadlock in send_sig{io, urg}() Chao Yu (1): f2fs: fix shift-out-of-bounds in sanity_check_raw_super() Christopher Obbard (1): um: random: Register random as hwrng-core device Chunguang Xu (1): ext4: avoid s_mb_prefetch to be zero in individual scenarios Daeho Jeong (1): f2fs: fix race of pending_pages in decompression Dan Williams (1): device-dax: Fix range release Daniel Vetter (1): fbcon: Disable accelerated scrolling Davide Caratti (1): net/sched: sch_taprio: reset child qdiscs before freeing them Dinghao Liu (1): rtc: sun6i: Fix memleak in sun6i_rtc_clk_init Eric Biggers (1): fs/namespace.c: WARN if mnt_count has become negative Gabriel Krisman Bertazi (1): um: ubd: Submit all data segments atomically Greg Kroah-Hartman (1): Linux 5.10.5 Heiko Carstens (1): s390: always clear kernel stack backchain before calling functions Hyeongseok Kim (1): dm verity: skip verity work if I/O error when system is shutting down Ilya Leoshkevich (1): lib/zlib: fix inflating zlib streams on s390 Ivan Vecera (1): ethtool: fix error paths in ethnl_set_channels() Jaegeuk Kim (1): f2fs: avoid race condition for shrinker count Jake Wang (1): drm/amd/display: updated wm table for Renoir Jamie Iles (1): jffs2: Fix NULL pointer dereference in rp_size fs option parsing Jan Kara (1): quota: Don't overflow quota file offsets Jeff Layton (1): ceph: fix inode refcount leak when ceph_fill_inode on non-I_NEW inode fails Jens Axboe (2): io_uring: don't assume mm is constant across submits io_uring: use bottom half safe lock for fixed file data Jessica Yu (1): module: delay kobject uevent until after module init call Kevin Vigor (1): md/raid10: initialize r10_bio->read_slot before use. Mauro Carvalho Chehab (1): media: gp8psk: initialize stats at power control logic Michal Kubecek (1): ethtool: fix string set id check Mike Kravetz (1): mm/hugetlb: fix deadlock in hugetlb_cow error path Miroslav Benes (1): module: set MODULE_STATE_GOING state when a module fails to load Nicholas Piggin (1): powerpc/64: irq replay remove decrementer overflow check Paolo Abeni (1): mptcp: fix security context on server socket Pavel Begunkov (4): io_uring: close a small race gap for files cancel io_uring: add a helper for setting a ref node io_uring: fix io_sqe_files_unregister() hangs io_uring: remove racy overflow list fast checks Petr Vorel (1): uapi: move constants from <linux/kernel.h> to <linux/const.h> Qinglang Miao (3): cgroup: Fix memory leak when parsing multiple source parameters powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() i3c master: fix missing destroy_workqueue() on error in i3c_master_register Quanyang Wang (1): opp: fix memory leak in _allocate_opp_table Randy Dunlap (3): zlib: move EXPORT_SYMBOL() and MODULE_LICENSE() out of dfltcc_syms.c scsi: cxgb4i: Fix TLS dependency bfs: don't use WARNING: string when it's just info. Rodrigo Siqueira (1): drm/amd/display: Add get_dig_frontend implementation for DCEx Rustam Kovhaev (1): reiserfs: add check for an invalid ih_entry_count Serge Semin (1): spi: dw-bt1: Fix undefined devm_mux_control_get symbol Takashi Iwai (3): ALSA: seq: Use bool for snd_seq_queue internal flags ALSA: rawmidi: Access runtime->avail always in spinlock ALSA: pcm: Clear the full allocated memory at hw_params Theodore Ts'o (1): ext4: check for invalid block size early when mounting a file system Thomas Gleixner (1): tick/sched: Remove bogus boot "safety" check Trond Myklebust (2): NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode NFSv4.2: Don't error when exiting early on a READ_PLUS buffer overflow Viresh Kumar (1): opp: Call the missing clk_put() on error Xiaoguang Wang (1): io_uring: check kthread stopped flag when sq thread is unparked Zhang Qilong (1): watchdog: rti-wdt: fix reference leak in rti_wdt_probe Zheng Liang (1): rtc: pl031: fix resource leak in pl031_probe lizhe (1): jffs2: Allow setting rp_size to zero during remounting

4 years, 7 months

1
1
0 0

Linux 5.4.87

by Greg Kroah-Hartman

I'm announcing the release of the 5.4.87 kernel. All users of the 5.4 kernel series must upgrade. The updated 5.4.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/powerpc/include/asm/bitops.h | 23 +++ arch/powerpc/sysdev/mpic_msgr.c | 2 arch/um/drivers/ubd_kern.c | 191 +++++++++++++++++++------------- arch/x86/kvm/cpuid.h | 14 ++ arch/x86/kvm/svm.c | 17 +- arch/x86/kvm/vmx/vmx.c | 13 +- arch/x86/kvm/x86.c | 22 +++ arch/x86/kvm/x86.h | 1 block/blk-pm.c | 15 +- drivers/block/null_blk_zoned.c | 19 ++- drivers/bluetooth/hci_h5.c | 8 + drivers/i3c/master.c | 5 drivers/md/dm-verity-target.c | 12 +- drivers/md/raid10.c | 3 drivers/media/usb/dvb-usb/gp8psk.c | 2 drivers/misc/vmw_vmci/vmci_context.c | 2 drivers/rtc/rtc-pl031.c | 6 - drivers/rtc/rtc-sun6i.c | 8 - drivers/scsi/cxgbi/cxgb4i/Kconfig | 1 drivers/thermal/cpu_cooling.c | 9 + drivers/vfio/pci/vfio_pci.c | 3 fs/bfs/inode.c | 2 fs/btrfs/ioctl.c | 39 ++++++ fs/crypto/fscrypt_private.h | 5 fs/crypto/hooks.c | 10 - fs/crypto/keysetup.c | 2 fs/crypto/policy.c | 6 - fs/ext4/namei.c | 3 fs/ext4/super.c | 14 +- fs/f2fs/checkpoint.c | 2 fs/f2fs/debug.c | 11 + fs/f2fs/f2fs.h | 12 +- fs/f2fs/node.c | 29 +++- fs/f2fs/node.h | 4 fs/f2fs/shrinker.c | 4 fs/f2fs/super.c | 9 - fs/fcntl.c | 10 + fs/jffs2/jffs2_fs_sb.h | 1 fs/jffs2/super.c | 17 +- fs/namespace.c | 9 + fs/nfs/nfs4super.c | 2 fs/nfs/pnfs.c | 33 +++++ fs/nfs/pnfs.h | 5 fs/pnode.h | 2 fs/quota/quota_tree.c | 8 - fs/reiserfs/stree.c | 6 + fs/ubifs/dir.c | 17 ++ include/linux/fscrypt.h | 34 +++++ include/linux/of.h | 1 include/uapi/linux/const.h | 5 include/uapi/linux/ethtool.h | 2 include/uapi/linux/fscrypt.h | 5 include/uapi/linux/kernel.h | 9 - include/uapi/linux/lightnvm.h | 2 include/uapi/linux/mroute6.h | 2 include/uapi/linux/netfilter/x_tables.h | 2 include/uapi/linux/netlink.h | 2 include/uapi/linux/sysctl.h | 2 kernel/cgroup/cgroup-v1.c | 2 kernel/module.c | 6 - kernel/time/tick-sched.c | 7 - net/sched/sch_taprio.c | 17 ++ sound/core/pcm_native.c | 9 + sound/core/rawmidi.c | 49 +++++--- sound/core/seq/seq_queue.h | 8 - tools/include/uapi/linux/const.h | 5 67 files changed, 562 insertions(+), 247 deletions(-) Anant Thazhemadam (2): Bluetooth: hci_h5: close serdev device and free hu in h5_close misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() Arnaldo Carvalho de Melo (1): tools headers UAPI: Sync linux/const.h with the kernel headers Bart Van Assche (1): scsi: block: Fix a race in the runtime power management code Boqun Feng (1): fcntl: Fix potential deadlock in send_sig{io, urg}() Chao Yu (1): f2fs: fix shift-out-of-bounds in sanity_check_raw_super() Christophe Leroy (1): powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() Damien Le Moal (1): null_blk: Fix zone size initialization Davide Caratti (1): net/sched: sch_taprio: reset child qdiscs before freeing them Dinghao Liu (1): rtc: sun6i: Fix memleak in sun6i_rtc_clk_init Eric Auger (1): vfio/pci: Move dummy_resources_list init in vfio_pci_probe() Eric Biggers (6): ext4: prevent creating duplicate encrypted filenames ubifs: prevent creating duplicate encrypted filenames f2fs: prevent creating duplicate encrypted filenames fscrypt: add fscrypt_is_nokey_name() fscrypt: remove kernel-internal constants from UAPI header fs/namespace.c: WARN if mnt_count has become negative Filipe Manana (1): btrfs: fix race when defragmenting leads to unnecessary IO Gabriel Krisman Bertazi (1): um: ubd: Submit all data segments atomically Greg Kroah-Hartman (1): Linux 5.4.87 Hyeongseok Kim (1): dm verity: skip verity work if I/O error when system is shutting down Jaegeuk Kim (1): f2fs: avoid race condition for shrinker count Jamie Iles (1): jffs2: Fix NULL pointer dereference in rp_size fs option parsing Jan Kara (2): ext4: don't remount read-only with errors=continue on reboot quota: Don't overflow quota file offsets Jessica Yu (1): module: delay kobject uevent until after module init call Johan Hovold (1): of: fix linker-section match-table corruption Kevin Vigor (1): md/raid10: initialize r10_bio->read_slot before use. Mauro Carvalho Chehab (1): media: gp8psk: initialize stats at power control logic Miroslav Benes (1): module: set MODULE_STATE_GOING state when a module fails to load Paolo Bonzini (3): KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL KVM: SVM: relax conditions for allowing MSR_IA32_SPEC_CTRL accesses KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits Petr Vorel (1): uapi: move constants from <linux/kernel.h> to <linux/const.h> Qinglang Miao (3): cgroup: Fix memory leak when parsing multiple source parameters powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() i3c master: fix missing destroy_workqueue() on error in i3c_master_register Randy Dunlap (2): scsi: cxgb4i: Fix TLS dependency bfs: don't use WARNING: string when it's just info. Rustam Kovhaev (1): reiserfs: add check for an invalid ih_entry_count Takashi Iwai (3): ALSA: seq: Use bool for snd_seq_queue internal flags ALSA: rawmidi: Access runtime->avail always in spinlock ALSA: pcm: Clear the full allocated memory at hw_params Thomas Gleixner (1): tick/sched: Remove bogus boot "safety" check Trond Myklebust (1): NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode Zheng Liang (1): rtc: pl031: fix resource leak in pl031_probe Zhuguangqing (1): thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed lizhe (1): jffs2: Allow setting rp_size to zero during remounting

4 years, 7 months

1
1
0 0

Linux 4.19.165

by Greg Kroah-Hartman

I'm announcing the release of the 4.19.165 kernel. All users of the 4.19 kernel series must upgrade. The updated 4.19.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.19.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 - arch/powerpc/include/asm/bitops.h | 23 +++++++++++++-- arch/powerpc/sysdev/mpic_msgr.c | 2 - arch/x86/kvm/cpuid.h | 14 +++++++++ arch/x86/kvm/svm.c | 9 +---- arch/x86/kvm/vmx.c | 6 +-- drivers/block/null_blk_zoned.c | 20 ++++++++----- drivers/bluetooth/hci_h5.c | 8 +++-- drivers/md/dm-verity-target.c | 12 +++++++ drivers/md/raid10.c | 3 + drivers/media/usb/dvb-usb/gp8psk.c | 2 - drivers/misc/vmw_vmci/vmci_context.c | 2 - drivers/rtc/rtc-sun6i.c | 8 +++-- drivers/vfio/pci/vfio_pci.c | 3 - drivers/xen/gntdev.c | 17 +++++++---- fs/crypto/hooks.c | 10 +++--- fs/ext4/namei.c | 3 + fs/ext4/super.c | 14 +++------ fs/f2fs/f2fs.h | 2 + fs/fcntl.c | 10 +++--- fs/nfs/nfs4super.c | 2 - fs/nfs/pnfs.c | 33 ++++++++++++++++++++- fs/nfs/pnfs.h | 5 +++ fs/quota/quota_tree.c | 8 ++--- fs/reiserfs/stree.c | 6 +++ fs/ubifs/dir.c | 17 ++++++++--- include/linux/fscrypt_notsupp.h | 5 +++ include/linux/fscrypt_supp.h | 29 ++++++++++++++++++ include/linux/of.h | 1 include/uapi/linux/const.h | 5 +++ include/uapi/linux/ethtool.h | 2 - include/uapi/linux/kernel.h | 9 ----- include/uapi/linux/lightnvm.h | 2 - include/uapi/linux/mroute6.h | 2 - include/uapi/linux/netfilter/x_tables.h | 2 - include/uapi/linux/netlink.h | 2 - include/uapi/linux/sysctl.h | 2 - kernel/module.c | 6 ++- sound/core/pcm_native.c | 9 ++++- sound/core/rawmidi.c | 49 ++++++++++++++++++++++---------- sound/core/seq/seq_queue.h | 8 ++--- 41 files changed, 274 insertions(+), 100 deletions(-) Anant Thazhemadam (2): Bluetooth: hci_h5: close serdev device and free hu in h5_close misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() Boqun Feng (1): fcntl: Fix potential deadlock in send_sig{io, urg}() Christophe Leroy (1): powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() Damien Le Moal (1): null_blk: Fix zone size initialization Dinghao Liu (1): rtc: sun6i: Fix memleak in sun6i_rtc_clk_init Eric Auger (1): vfio/pci: Move dummy_resources_list init in vfio_pci_probe() Eric Biggers (4): fscrypt: add fscrypt_is_nokey_name() ext4: prevent creating duplicate encrypted filenames f2fs: prevent creating duplicate encrypted filenames ubifs: prevent creating duplicate encrypted filenames Greg Kroah-Hartman (1): Linux 4.19.165 Hyeongseok Kim (1): dm verity: skip verity work if I/O error when system is shutting down Jan Kara (2): ext4: don't remount read-only with errors=continue on reboot quota: Don't overflow quota file offsets Jessica Yu (1): module: delay kobject uevent until after module init call Johan Hovold (1): of: fix linker-section match-table corruption Kevin Vigor (1): md/raid10: initialize r10_bio->read_slot before use. Mauro Carvalho Chehab (1): media: gp8psk: initialize stats at power control logic Miroslav Benes (1): module: set MODULE_STATE_GOING state when a module fails to load Paolo Bonzini (2): KVM: SVM: relax conditions for allowing MSR_IA32_SPEC_CTRL accesses KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits Petr Vorel (1): uapi: move constants from <linux/kernel.h> to <linux/const.h> Qinglang Miao (1): powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() Rustam Kovhaev (1): reiserfs: add check for an invalid ih_entry_count Souptick Joarder (1): xen/gntdev.c: Mark pages as dirty Takashi Iwai (3): ALSA: seq: Use bool for snd_seq_queue internal flags ALSA: rawmidi: Access runtime->avail always in spinlock ALSA: pcm: Clear the full allocated memory at hw_params Trond Myklebust (1): NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode

4 years, 7 months

1
1
0 0

request for 5.10-stable: a31489d2a368 ("Bluetooth: Fix attempting to set RPA timeout when unsupported")

by Sudip Mukherjee

Hi Greg, Sasha, This was not marked for stable but looks like it should be in 5.10-stable. Please apply to your queue. -- Regards Sudip

4 years, 7 months

2
1
0 0

[PATCH 4.19] dmaengine: at_hdmac: Fix memory leak

by Pavel Machek

This fixes memory leak in at_hdmac. Mainline does not have the same problem. Signed-off-by: Pavel Machek (CIP) <pavel(a)denx.de> diff --git a/drivers/dma/at_hdmac.c b/drivers/dma/at_hdmac.c index 86427f6ba78c..0847b2055857 100644 --- a/drivers/dma/at_hdmac.c +++ b/drivers/dma/at_hdmac.c @@ -1714,8 +1714,10 @@ static struct dma_chan *at_dma_xlate(struct of_phandle_args *dma_spec, atslave->dma_dev = &dmac_pdev->dev; chan = dma_request_channel(mask, at_dma_filter, atslave); - if (!chan) + if (!chan) { + kfree(atslave); return NULL; + } atchan = to_at_dma_chan(chan); atchan->per_if = dma_spec->args[0] & 0xff; -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html

4 years, 7 months

4
6
0 0

RTC pcf2127 fix for 5.10-stable

by Rasmus Villemoes

Hi Greg Please consider adding commit 71ac13457d9d1007effde65b54818106b2c2b525 Author: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Date: Fri Dec 18 11:10:54 2020 +0100 rtc: pcf2127: only use watchdog when explicitly available to the 5.10 stable queue. You will need the preparatory refactoring patch commit 5d78533a0c53af9659227c803df944ba27cd56e0 Author: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Date: Thu Sep 24 12:52:55 2020 +0200 rtc: pcf2127: move watchdog initialisation to a separate function And if documentation is supposed to be kept up-to-date in the -stable trees, you can pick commit 320d159e2d63a97a40f24cd6dfda5a57eec65b91 Author: Rasmus Villemoes <rasmus.villemoes(a)prevas.dk> Date: Fri Dec 18 11:10:53 2020 +0100 dt-bindings: rtc: add reset-source property Thanks, Rasmus

4 years, 7 months

2
1
0 0

[PATCH v4 1/3] iommu/vt-d: Move intel_iommu info from struct intel_svm to struct intel_svm_dev

by Liu Yi L

Current struct intel_svm has a field to record the struct intel_iommu pointer for a PASID bind. And struct intel_svm will be shared by all the devices bind to the same process. The devices may be behind different DMAR units. As the iommu driver code uses the intel_iommu pointer stored in intel_svm struct to do cache invalidations, it may only flush the cache on a single DMAR unit, for others, the cache invalidation is missed. As intel_svm struct already has a device list, this patch just moves the intel_iommu pointer to be a field of intel_svm_dev struct. Fixes: 1c4f88b7f1f92 ("iommu/vt-d: Shared virtual address in scalable mode") Cc: Lu Baolu <baolu.lu(a)linux.intel.com> Cc: Jacob Pan <jacob.jun.pan(a)linux.intel.com> Cc: Raj Ashok <ashok.raj(a)intel.com> Cc: David Woodhouse <dwmw2(a)infradead.org> Reported-by: Guo Kaijie <Kaijie.Guo(a)intel.com> Reported-by: Xin Zeng <xin.zeng(a)intel.com> Signed-off-by: Guo Kaijie <Kaijie.Guo(a)intel.com> Signed-off-by: Xin Zeng <xin.zeng(a)intel.com> Signed-off-by: Liu Yi L <yi.l.liu(a)intel.com> Tested-by: Guo Kaijie <Kaijie.Guo(a)intel.com> Cc: stable(a)vger.kernel.org # v5.0+ Acked-by: Lu Baolu <baolu.lu(a)linux.intel.com> --- drivers/iommu/intel/svm.c | 9 +++++---- include/linux/intel-iommu.h | 2 +- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/drivers/iommu/intel/svm.c b/drivers/iommu/intel/svm.c index 4fa248b..6956669 100644 --- a/drivers/iommu/intel/svm.c +++ b/drivers/iommu/intel/svm.c @@ -142,7 +142,7 @@ static void intel_flush_svm_range_dev (struct intel_svm *svm, struct intel_svm_d } desc.qw2 = 0; desc.qw3 = 0; - qi_submit_sync(svm->iommu, &desc, 1, 0); + qi_submit_sync(sdev->iommu, &desc, 1, 0); if (sdev->dev_iotlb) { desc.qw0 = QI_DEV_EIOTLB_PASID(svm->pasid) | @@ -166,7 +166,7 @@ static void intel_flush_svm_range_dev (struct intel_svm *svm, struct intel_svm_d } desc.qw2 = 0; desc.qw3 = 0; - qi_submit_sync(svm->iommu, &desc, 1, 0); + qi_submit_sync(sdev->iommu, &desc, 1, 0); } } @@ -211,7 +211,7 @@ static void intel_mm_release(struct mmu_notifier *mn, struct mm_struct *mm) */ rcu_read_lock(); list_for_each_entry_rcu(sdev, &svm->devs, list) - intel_pasid_tear_down_entry(svm->iommu, sdev->dev, + intel_pasid_tear_down_entry(sdev->iommu, sdev->dev, svm->pasid, true); rcu_read_unlock(); @@ -363,6 +363,7 @@ int intel_svm_bind_gpasid(struct iommu_domain *domain, struct device *dev, } sdev->dev = dev; sdev->sid = PCI_DEVID(info->bus, info->devfn); + sdev->iommu = iommu; /* Only count users if device has aux domains */ if (iommu_dev_feature_enabled(dev, IOMMU_DEV_FEAT_AUX)) @@ -546,6 +547,7 @@ intel_svm_bind_mm(struct device *dev, unsigned int flags, goto out; } sdev->dev = dev; + sdev->iommu = iommu; ret = intel_iommu_enable_pasid(iommu, dev); if (ret) { @@ -575,7 +577,6 @@ intel_svm_bind_mm(struct device *dev, unsigned int flags, kfree(sdev); goto out; } - svm->iommu = iommu; if (pasid_max > intel_pasid_max_id) pasid_max = intel_pasid_max_id; diff --git a/include/linux/intel-iommu.h b/include/linux/intel-iommu.h index d956987..9452268 100644 --- a/include/linux/intel-iommu.h +++ b/include/linux/intel-iommu.h @@ -758,6 +758,7 @@ struct intel_svm_dev { struct list_head list; struct rcu_head rcu; struct device *dev; + struct intel_iommu *iommu; struct svm_dev_ops *ops; struct iommu_sva sva; u32 pasid; @@ -771,7 +772,6 @@ struct intel_svm { struct mmu_notifier notifier; struct mm_struct *mm; - struct intel_iommu *iommu; unsigned int flags; u32 pasid; int gpasid; /* In case that guest PASID is different from host PASID */ -- 2.7.4

4 years, 7 months

1
0
0 0

[PATCH v2] Revert "media: videobuf2: Fix length check for single plane dmabuf queueing"

by Naushir Patuck

The updated length check for dmabuf types broke existing usage in v4l2 userland clients. Fixes: 961d3b27 ("media: videobuf2: Fix length check for single plane dmabuf queueing") Cc: stable(a)vger.kernel.org Signed-off-by: Naushir Patuck <naush(a)raspberrypi.com> Tested-by: Kieran Bingham <kieran.bingham+renesas(a)ideasonboard.com> Reviewed-by: Kieran Bingham <kieran.bingham+renesas(a)ideasonboard.com> --- drivers/media/common/videobuf2/videobuf2-v4l2.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/drivers/media/common/videobuf2/videobuf2-v4l2.c b/drivers/media/common/videobuf2/videobuf2-v4l2.c index 96d3b2b2aa31..3f61f5863bf7 100644 --- a/drivers/media/common/videobuf2/videobuf2-v4l2.c +++ b/drivers/media/common/videobuf2/videobuf2-v4l2.c @@ -118,8 +118,7 @@ static int __verify_length(struct vb2_buffer *vb, const struct v4l2_buffer *b) return -EINVAL; } } else { - length = (b->memory == VB2_MEMORY_USERPTR || - b->memory == VB2_MEMORY_DMABUF) + length = (b->memory == VB2_MEMORY_USERPTR) ? b->length : vb->planes[0].length; if (b->bytesused > length) -- 2.25.1

4 years, 7 months

2
1
0 0

[PATCH 4.19 00/29] 4.19.165-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.19.165 release. There are 29 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 07 Jan 2021 09:08:03 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.165-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.19.165-rc2 Hyeongseok Kim <hyeongseok(a)gmail.com> dm verity: skip verity work if I/O error when system is shutting down Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Clear the full allocated memory at hw_params Jessica Yu <jeyu(a)kernel.org> module: delay kobject uevent until after module init call Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode Qinglang Miao <miaoqinglang(a)huawei.com> powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() Jan Kara <jack(a)suse.cz> quota: Don't overflow quota file offsets Miroslav Benes <mbenes(a)suse.cz> module: set MODULE_STATE_GOING state when a module fails to load Dinghao Liu <dinghao.liu(a)zju.edu.cn> rtc: sun6i: Fix memleak in sun6i_rtc_clk_init Boqun Feng <boqun.feng(a)gmail.com> fcntl: Fix potential deadlock in send_sig{io, urg}() Takashi Iwai <tiwai(a)suse.de> ALSA: rawmidi: Access runtime->avail always in spinlock Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Use bool for snd_seq_queue internal flags Mauro Carvalho Chehab <mchehab+huawei(a)kernel.org> media: gp8psk: initialize stats at power control logic Anant Thazhemadam <anant.thazhemadam(a)gmail.com> misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() Rustam Kovhaev <rkovhaev(a)gmail.com> reiserfs: add check for an invalid ih_entry_count Anant Thazhemadam <anant.thazhemadam(a)gmail.com> Bluetooth: hci_h5: close serdev device and free hu in h5_close Johan Hovold <johan(a)kernel.org> of: fix linker-section match-table corruption Damien Le Moal <damien.lemoal(a)wdc.com> null_blk: Fix zone size initialization Souptick Joarder <jrdr.linux(a)gmail.com> xen/gntdev.c: Mark pages as dirty Christophe Leroy <christophe.leroy(a)csgroup.eu> powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits Paolo Bonzini <pbonzini(a)redhat.com> KVM: SVM: relax conditions for allowing MSR_IA32_SPEC_CTRL accesses Petr Vorel <petr.vorel(a)gmail.com> uapi: move constants from <linux/kernel.h> to <linux/const.h> Jan Kara <jack(a)suse.cz> ext4: don't remount read-only with errors=continue on reboot Eric Auger <eric.auger(a)redhat.com> vfio/pci: Move dummy_resources_list init in vfio_pci_probe() Eric Biggers <ebiggers(a)google.com> ubifs: prevent creating duplicate encrypted filenames Eric Biggers <ebiggers(a)google.com> f2fs: prevent creating duplicate encrypted filenames Eric Biggers <ebiggers(a)google.com> ext4: prevent creating duplicate encrypted filenames Eric Biggers <ebiggers(a)google.com> fscrypt: add fscrypt_is_nokey_name() Kevin Vigor <kvigor(a)gmail.com> md/raid10: initialize r10_bio->read_slot before use. ------------- Diffstat: Makefile | 4 +-- arch/powerpc/include/asm/bitops.h | 23 ++++++++++++++-- arch/powerpc/sysdev/mpic_msgr.c | 2 +- arch/x86/kvm/cpuid.h | 14 ++++++++++ arch/x86/kvm/svm.c | 9 ++---- arch/x86/kvm/vmx.c | 6 ++-- drivers/block/null_blk_zoned.c | 20 +++++++++----- drivers/bluetooth/hci_h5.c | 8 ++++-- drivers/md/dm-verity-target.c | 12 +++++++- drivers/md/raid10.c | 3 +- drivers/media/usb/dvb-usb/gp8psk.c | 2 +- drivers/misc/vmw_vmci/vmci_context.c | 2 +- drivers/rtc/rtc-sun6i.c | 8 ++++-- drivers/vfio/pci/vfio_pci.c | 3 +- drivers/xen/gntdev.c | 17 ++++++++---- fs/crypto/hooks.c | 10 +++---- fs/ext4/namei.c | 3 ++ fs/ext4/super.c | 14 ++++------ fs/f2fs/f2fs.h | 2 ++ fs/fcntl.c | 10 ++++--- fs/nfs/nfs4super.c | 2 +- fs/nfs/pnfs.c | 33 ++++++++++++++++++++-- fs/nfs/pnfs.h | 5 ++++ fs/quota/quota_tree.c | 8 +++--- fs/reiserfs/stree.c | 6 ++++ fs/ubifs/dir.c | 17 +++++++++--- include/linux/fscrypt_notsupp.h | 5 ++++ include/linux/fscrypt_supp.h | 29 +++++++++++++++++++ include/linux/of.h | 1 + include/uapi/linux/const.h | 5 ++++ include/uapi/linux/ethtool.h | 2 +- include/uapi/linux/kernel.h | 9 +----- include/uapi/linux/lightnvm.h | 2 +- include/uapi/linux/mroute6.h | 2 +- include/uapi/linux/netfilter/x_tables.h | 2 +- include/uapi/linux/netlink.h | 2 +- include/uapi/linux/sysctl.h | 2 +- kernel/module.c | 6 ++-- sound/core/pcm_native.c | 9 ++++-- sound/core/rawmidi.c | 49 +++++++++++++++++++++++---------- sound/core/seq/seq_queue.h | 8 +++--- 41 files changed, 275 insertions(+), 101 deletions(-)

4 years, 7 months

5
37
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror