NoaSoftware
/
TencentOS-kernel
forked from TencentOS/TencentOS-kernel
0
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
TencentOS-kernel/drivers
History
Mathias Nyman 21fbdd301e xhci: fix potential array out of bounds with several interrupters 
[ Upstream commit 286fd02fd54b6acab65809549cf5fb3f2a886696 ]

The Max Interrupters supported by the controller is given in a 10bit
wide bitfield, but the driver uses a fixed 128 size array to index these
interrupters.

Klockwork reports a possible array out of bounds case which in theory
is possible. In practice this hasn't been hit as a common number of Max
Interrupters for new controllers is 8, not even close to 128.

This needs to be fixed anyway

Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>
Link: https://lore.kernel.org/r/20210406070208.3406266-4-mathias.nyman@linux.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
 		2021-05-20 16:07:25 +08:00
..
accessibility
…
acpi ACPI: custom_method: fix a possible memory leak 2021-05-20 16:07:19 +08:00
amba amba: Fix resource leak for drivers without .remove 2021-04-12 12:52:26 +08:00
android binder: add flag to clear buffer on txn complete 2021-03-16 16:43:28 +08:00
ata ata: ahci_brcm: Add back regulators management 2021-04-12 12:52:20 +08:00
atm atm: idt77252: fix null-ptr-dereference 2021-04-12 12:53:23 +08:00
auxdisplay auxdisplay: ht16k33: Fix refresh rate handling 2021-04-12 12:52:25 +08:00
base driver core: Fix locking bug in deferred_probe_timeout_work_func() 2021-05-20 16:07:06 +08:00
bcma
…
block xen-blkback: don't leak persistent grants from xen_blkbk_map() 2021-04-12 12:53:32 +08:00
bluetooth Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl 2021-04-12 12:52:46 +08:00
bus bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first 2021-05-20 16:07:23 +08:00
cdrom
…
char parisc: parisc-agp requires SBA IOMMU driver 2021-05-20 16:06:56 +08:00
clk clk: socfpga: fix iomem pointer cast on 64-bit 2021-05-20 16:07:03 +08:00
clocksource clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined 2021-04-12 12:52:24 +08:00
connector
…
counter counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register 2021-05-20 16:06:54 +08:00
cpufreq cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev 2021-04-12 12:53:22 +08:00
cpuidle Intel: cpuidle: Allow idle states to be disabled by default 2021-04-25 14:31:12 +08:00
crypto crypto: qat - fix unmap invalid dma address 2021-05-20 16:07:23 +08:00
dax device-dax/core: Fix memory leak when rmmod dax.ko 2021-03-16 16:43:45 +08:00
dca
…
devfreq PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out 2021-03-16 16:36:35 +08:00
dio
…
dma dmaengine: dw: Make it dependent to HAS_IOMEM 2021-05-20 16:07:08 +08:00
dma-buf dmabuf: fix use-after-free of dmabuf's file->f_inode 2021-04-12 12:51:14 +08:00
edac Intel: x86/mce: Fix all mce notifiers to update the mce->kflags bitmask 2021-04-25 14:31:15 +08:00
eisa
…
extcon extcon: Fix error handling in extcon_dev_register 2021-05-20 16:06:50 +08:00
firewire firewire: nosy: Fix a use-after-free bug in nosy_ioctl() 2021-05-20 16:06:50 +08:00
firmware firmware/efi: Fix a use after bug in efi_mem_reserve_persistent 2021-04-12 12:53:21 +08:00
fpga
…
fsi
…
gnss
…
gpio gpio: omap: Save and restore sysconfig 2021-05-20 16:07:14 +08:00
gpu drm/msm: Fix a5xx/a6xx timestamps 2021-05-20 16:07:09 +08:00
greybus
…
hid HID: wacom: Assign boolean values to a bool variable 2021-05-20 16:07:15 +08:00
hsi HSI: Fix PM usage counter unbalance in ssi_hw_init 2021-04-12 12:52:22 +08:00
hv Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() 2021-04-12 12:52:21 +08:00
hwmon hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values 2021-04-12 12:51:24 +08:00
hwspinlock
…
hwtracing intel_th: pci: Add Rocket Lake CPU support 2021-05-20 16:07:22 +08:00
i2c i2c: turn recovery error on init to debug 2021-05-20 16:06:58 +08:00
i3c i3c master: fix missing destroy_workqueue() on error in i3c_master_register 2021-03-16 16:43:55 +08:00
ide scsi: ide: Do not set the RQF_PREEMPT flag for sense requests 2021-04-12 12:51:06 +08:00
idle Intel: intel_idle: Customize IceLake server support 2021-04-25 14:31:16 +08:00
iio iio: hid-sensor-temperature: Fix issues of timestamp channel 2021-04-12 12:53:19 +08:00
infiniband RDMA/addr: Be strict with gid size 2021-05-20 16:07:03 +08:00
input Input: i8042 - fix Pegatron C15B ID entry 2021-05-20 16:07:10 +08:00
interconnect interconnect: core: fix error return code of icc_link_destroy() 2021-05-20 16:07:05 +08:00
iommu iommu/amd: Fix performance counter initialization 2021-04-12 12:53:03 +08:00
ipack
…
irqchip irqchip/gic-v3: Do not enable irqs when handling spurious interrups 2021-05-20 16:07:22 +08:00
isdn mISDN: fix crash in fritzpci 2021-05-20 16:06:52 +08:00
leds leds: trigger: fix potential deadlock with libata 2021-04-12 12:51:44 +08:00
lightnvm lightnvm: fix memory leak when submit fails 2021-04-12 12:51:39 +08:00
macintosh
…
mailbox mailbox: avoid timer start from callback 2021-03-16 16:38:59 +08:00
mcb
…
md dm verity fec: fix misaligned RS roots IO 2021-05-20 16:07:11 +08:00
media media: rc: compile rc-cec.c into rc-core 2021-04-12 12:53:01 +08:00
memory memory: ti-aemif: Drop child node when jumping out loop 2021-04-12 12:52:13 +08:00
memstick memstick: r592: Fix error return in r592_probe() 2021-03-16 16:43:02 +08:00
message scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() 2021-03-16 16:39:58 +08:00
mfd mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() 2021-04-12 12:52:27 +08:00
misc habanalabs: Call put_pid() when releasing control device 2021-04-12 12:53:24 +08:00
mmc mmc: core: Fix hanging on I/O during system suspend for removable cards 2021-05-20 16:07:21 +08:00
mtd mtd: rawnand: atmel: Update ecc_stats.corrected counter 2021-05-20 16:07:20 +08:00
mux
…
net staging: wimax/i2400m: fix byte-order issue 2021-05-20 16:07:23 +08:00
nfc nfc: s3fwrn5: Release the nfc firmware 2021-03-16 16:43:15 +08:00
ntb NTB: hw: amd: fix an issue about leak system resources 2021-03-16 16:39:10 +08:00
nubus
…
nvdimm libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC 2021-05-20 16:07:11 +08:00
nvme nvme-mpath: replace direct_make_request with generic_make_request 2021-05-20 16:06:54 +08:00
nvmem nvmem: core: skip child nodes not matching binding 2021-04-12 12:52:30 +08:00
of of/fdt: Make sure no-map does not remove already reserved regions 2021-04-12 12:52:24 +08:00
opp opp: Reduce the size of critical section in _opp_table_kref_release() 2021-03-16 16:40:41 +08:00
oprofile
…
parisc
…
parport
…
pci PCI: PM: Do not read power state in pci_enable_device_flags() 2021-05-20 16:07:24 +08:00
pcmcia
…
perf perf/arm_pmu_platform: Fix error handling 2021-05-20 16:07:24 +08:00
phy phy: rockchip-emmc: emmc_phy_init() always return 0 2021-04-12 12:52:29 +08:00
pinctrl pinctrl: lewisburg: Update number of pins in community 2021-05-20 16:07:14 +08:00
platform platform/x86: thinkpad_acpi: Correct thermal sensor allocation 2021-05-20 16:07:18 +08:00
pnp
…
power power: reset: at91-sama5d2_shdwc: fix wkupdbc mask 2021-04-12 12:52:24 +08:00
powercap powercap: restrict energy meter to root access 2021-03-16 16:40:32 +08:00
pps
…
ps3 powerpc/ps3: use dma_mapping_error() 2021-03-16 16:43:15 +08:00
ptp
…
pwm pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() 2021-04-12 12:52:30 +08:00
rapidio rapidio: fix the missed put_device() for rio_mport_add_riodev 2021-03-16 16:38:59 +08:00
ras Intel: x86/mce: Fix all mce notifiers to update the mce->kflags bitmask 2021-04-25 14:31:15 +08:00
regulator regulator: bd9571mwv: Fix AVS and DVFS voltage range 2021-05-20 16:06:58 +08:00
remoteproc remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() 2021-03-16 16:43:11 +08:00
reset
…
rpmsg rpmsg: glink: Use complete_all for open states 2021-03-16 16:39:50 +08:00
rtc rtc: s5m: select REGMAP_I2C 2021-04-12 12:52:24 +08:00
s390 s390/dasd: fix hanging IO request during DASD driver unbind 2021-04-12 12:53:06 +08:00
sbus
…
scsi scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() 2021-05-20 16:07:20 +08:00
sfi
…
sh
…
siox
…
slimbus slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI 2021-03-16 16:42:54 +08:00
soc soc/fsl: qbman: fix conflicting alignment attributes 2021-05-20 16:07:01 +08:00
soundwire soundwire: cadence: fix ACK/NAK handling 2021-04-12 12:52:29 +08:00
spi spi: ath79: remove spi-master setup and cleanup assignment 2021-05-20 16:07:23 +08:00
spmi spmi: spmi-pmic-arb: Fix hw_irq overflow 2021-04-12 12:52:39 +08:00
ssb
…
staging staging: rtl8192e: Change state information from u16 to u8 2021-05-20 16:06:52 +08:00
target scsi: target: pscsi: Clean up after failure in pscsi_map_sg() 2021-05-20 16:06:53 +08:00
tc
…
tee tee: optee: do not check memref size on return from Secure World 2021-05-20 16:07:24 +08:00
thermal thermal/core: Add NULL pointer check before using cooling device stats 2021-05-20 16:06:47 +08:00
thunderbolt thunderbolt: Fix use-after-free in remove_unplugged_switch() 2021-03-16 16:42:03 +08:00
tty vt/consolemap: do font sum unsigned 2021-04-12 12:52:46 +08:00
uio uio: avoid to request_irq when the legacy irq is not connected 2021-03-16 16:43:58 +08:00
usb xhci: fix potential array out of bounds with several interrupters 2021-05-20 16:07:25 +08:00
vfio vfio: Depend on MMU 2021-05-20 16:07:19 +08:00
vhost vhost: Fix vhost_vq_reset() 2021-05-20 16:06:46 +08:00
video fbdev: zero-fill colormap in fbcmap.c 2021-05-20 16:07:23 +08:00
virt virt: vbox: Do not use wait_event_interruptible when called from kernel context 2021-04-12 12:52:10 +08:00
virtio virtio_ring: Fix two use after free bugs 2021-03-16 16:43:19 +08:00
visorbus
…
vlynq
…
vme
…
w1 w1: mxc_w1: Fix timeout resolution problem leading to bus error 2021-03-16 16:39:58 +08:00
watchdog watchdog: mei_wdt: request stop on unregister 2021-04-12 12:52:38 +08:00
xen xen/events: fix setting irq affinity 2021-05-20 16:07:06 +08:00
zorro
…
Kconfig
…
Makefile
…