TencentOS
/
TencentOS-kernel
mirror of https://github.com/Tencent/TencentOS-kernel
0
0
Fork 4
Code Issues Projects Releases Wiki Activity
TencentOS-kernel/drivers
History
Colin Ian King 7fd4eb576c liquidio: Fix unintented sign extension of a left shift of a u16 
[ Upstream commit 298b58f00c0f86868ea717426beb5c1198772f81 ]

The macro CN23XX_PEM_BAR1_INDEX_REG is being used to shift oct->pcie_port
(a u16) left 24 places. There are two subtle issues here, first the
shift gets promoted to an signed int and then sign extended to a u64.
If oct->pcie_port is 0x80 or more then the upper bits get sign extended
to 1. Secondly shfiting a u16 24 bits will lead to an overflow so it
needs to be cast to a u64 for all the bits to not overflow.

It is entirely possible that the u16 port value is never large enough
for this to fail, but it is useful to fix unintended overflows such
as this.

Fix this by casting the port parameter to the macro to a u64 before
the shift.

Addresses-Coverity: ("Unintended sign extension")
Fixes: 5bc67f587ba7 ("liquidio: CN23XX register definitions")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
 		2021-05-20 16:07:56 +08:00
..
accessibility
…
acpi ACPI: CPPC: Replace cppc_attr with kobj_attribute 2021-05-20 16:07:49 +08:00
amba amba: Fix resource leak for drivers without .remove 2021-04-12 12:52:26 +08:00
android binder: add flag to clear buffer on txn complete 2021-03-16 16:43:28 +08:00
ata ata: libahci_platform: fix IRQ check 2021-05-20 16:07:53 +08:00
atm atm: idt77252: fix null-ptr-dereference 2021-04-12 12:53:23 +08:00
auxdisplay auxdisplay: ht16k33: Fix refresh rate handling 2021-04-12 12:52:25 +08:00
base node: fix device cleanups in error handling code 2021-05-20 16:07:51 +08:00
bcma
…
block drivers/block/null_blk/main: Fix a double free in null_init. 2021-05-20 16:07:55 +08:00
bluetooth Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl 2021-04-12 12:52:46 +08:00
bus bus: qcom: Put child node before return 2021-05-20 16:07:47 +08:00
cdrom
…
char ttyprintk: Add TTY hangup callback. 2021-05-20 16:07:51 +08:00
clk clk: uniphier: Fix potential infinite loop 2021-05-20 16:07:53 +08:00
clocksource clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined 2021-04-12 12:52:24 +08:00
connector
…
counter counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register 2021-05-20 16:06:54 +08:00
cpufreq cpufreq: armada-37xx: Fix determining base CPU frequency 2021-05-20 16:07:50 +08:00
cpuidle Intel: cpuidle: Allow idle states to be disabled by default 2021-04-25 14:31:12 +08:00
crypto crypto: qat - Fix a double free in adf_create_ring 2021-05-20 16:07:49 +08:00
dax device-dax/core: Fix memory leak when rmmod dax.ko 2021-03-16 16:43:45 +08:00
dca
…
devfreq PM / devfreq: Use more accurate returned new_freq as resume_freq 2021-05-20 16:07:49 +08:00
dio
…
dma dmaengine: dw: Make it dependent to HAS_IOMEM 2021-05-20 16:07:08 +08:00
dma-buf dmabuf: fix use-after-free of dmabuf's file->f_inode 2021-04-12 12:51:14 +08:00
edac Intel: x86/mce: Fix all mce notifiers to update the mce->kflags bitmask 2021-04-25 14:31:15 +08:00
eisa
…
extcon extcon: arizona: Fix various races on driver unbind 2021-05-20 16:07:27 +08:00
firewire firewire: nosy: Fix a use-after-free bug in nosy_ioctl() 2021-05-20 16:06:50 +08:00
firmware firmware: qcom-scm: Fix QCOM_SCM configuration 2021-05-20 16:07:51 +08:00
fpga
…
fsi
…
gnss
…
gpio gpio: omap: Save and restore sysconfig 2021-05-20 16:07:14 +08:00
gpu drm/amdkfd: fix build error with AMD_IOMMU_V2=m 2021-05-20 16:07:52 +08:00
greybus
…
hid HID: plantronics: Workaround for double volume key presses 2021-05-20 16:07:55 +08:00
hsi HSI: core: fix resource leaks in hsi_add_client_from_dt() 2021-05-20 16:07:54 +08:00
hv Drivers: hv: vmbus: Increase wait time for VMbus unload 2021-05-20 16:07:51 +08:00
hwmon hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values 2021-04-12 12:51:24 +08:00
hwspinlock
…
hwtracing intel_th: pci: Add Alder Lake-M support 2021-05-20 16:07:34 +08:00
i2c i2c: turn recovery error on init to debug 2021-05-20 16:06:58 +08:00
i3c Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register" 2021-05-20 16:07:44 +08:00
ide scsi: ide: Do not set the RQF_PREEMPT flag for sense requests 2021-04-12 12:51:06 +08:00
idle Intel: intel_idle: Customize IceLake server support 2021-04-25 14:31:16 +08:00
iio iio:accel:adis16201: Fix wrong axis assignment that prevents loading 2021-05-20 16:07:40 +08:00
infiniband IB/hfi1: Fix error return code in parse_platform_config() 2021-05-20 16:07:56 +08:00
input Input: ili210x - add missing negation for touch indication on ili210x 2021-05-20 16:07:34 +08:00
interconnect interconnect: core: fix error return code of icc_link_destroy() 2021-05-20 16:07:05 +08:00
iommu iommu/amd: Fix performance counter initialization 2021-04-12 12:53:03 +08:00
ipack
…
irqchip irqchip/gic-v3: Fix OF_BAD_ADDR error handling 2021-05-20 16:07:48 +08:00
isdn mISDN: fix crash in fritzpci 2021-05-20 16:06:52 +08:00
leds leds: trigger: fix potential deadlock with libata 2021-04-12 12:51:44 +08:00
lightnvm lightnvm: fix memory leak when submit fails 2021-04-12 12:51:39 +08:00
macintosh macintosh/via-macii: Access autopoll_devs when inside lock 2021-03-16 16:33:39 +08:00
mailbox mailbox: avoid timer start from callback 2021-03-16 16:38:59 +08:00
mcb
…
md md: Fix missing unused status line of /proc/mdstat 2021-05-20 16:07:41 +08:00
media media: v4l2-ctrls.c: fix race condition in hdl->requests list 2021-05-20 16:07:53 +08:00
memory memory: pl353: fix mask of ECC page_size config register 2021-05-20 16:07:48 +08:00
memstick memstick: r592: Fix error return in r592_probe() 2021-03-16 16:43:02 +08:00
message scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() 2021-03-16 16:39:58 +08:00
mfd mfd: stm32-timers: Avoid clearing auto reload register 2021-05-20 16:07:54 +08:00
misc misc: vmw_vmci: explicitly initialize vmci_datagram payload 2021-05-20 16:07:40 +08:00
mmc mmc: sdhci-pci: Add PCI IDs for Intel LKF 2021-05-20 16:07:28 +08:00
mtd mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init 2021-05-20 16:07:48 +08:00
mux
…
net liquidio: Fix unintented sign extension of a left shift of a u16 2021-05-20 16:07:56 +08:00
nfc nfc: pn533: prevent potential memory corruption 2021-05-20 16:07:56 +08:00
ntb NTB: hw: amd: fix an issue about leak system resources 2021-03-16 16:39:10 +08:00
nubus
…
nvdimm libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC 2021-05-20 16:07:11 +08:00
nvme nvme-pci: don't simple map sgl when sgls are disabled 2021-05-20 16:07:54 +08:00
nvmem nvmem: core: skip child nodes not matching binding 2021-04-12 12:52:30 +08:00
of of/fdt: Make sure no-map does not remove already reserved regions 2021-04-12 12:52:24 +08:00
opp opp: Reduce the size of critical section in _opp_table_kref_release() 2021-03-16 16:40:41 +08:00
oprofile
…
parisc parisc: mask out enable and reserved bits from sba imask 2021-03-16 16:33:54 +08:00
parport
…
pci PCI: Allow VPD access for QLogic ISP2722 2021-05-20 16:07:40 +08:00
pcmcia
…
perf perf/arm_pmu_platform: Fix error handling 2021-05-20 16:07:24 +08:00
phy phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally 2021-05-20 16:07:47 +08:00
pinctrl pinctrl: lewisburg: Update number of pins in community 2021-05-20 16:07:14 +08:00
platform platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table 2021-05-20 16:07:51 +08:00
pnp
…
power power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove() 2021-05-20 16:07:29 +08:00
powercap powercap: restrict energy meter to root access 2021-03-16 16:40:32 +08:00
pps
…
ps3 powerpc/ps3: use dma_mapping_error() 2021-03-16 16:43:15 +08:00
ptp
…
pwm pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() 2021-04-12 12:52:30 +08:00
rapidio rapidio: fix the missed put_device() for rio_mport_add_riodev 2021-03-16 16:38:59 +08:00
ras Intel: x86/mce: Fix all mce notifiers to update the mce->kflags bitmask 2021-04-25 14:31:15 +08:00
regulator regulator: bd9571mwv: Fix AVS and DVFS voltage range 2021-05-20 16:06:58 +08:00
remoteproc remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() 2021-03-16 16:43:11 +08:00
reset
…
rpmsg rpmsg: glink: Use complete_all for open states 2021-03-16 16:39:50 +08:00
rtc rtc: s5m: select REGMAP_I2C 2021-04-12 12:52:24 +08:00
s390 s390/dasd: fix hanging IO request during DASD driver unbind 2021-04-12 12:53:06 +08:00
sbus
…
scsi scsi: ibmvfc: Fix invalid state machine BUG_ON() 2021-05-20 16:07:54 +08:00
sfi
…
sh
…
siox
…
slimbus slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI 2021-03-16 16:42:54 +08:00
soc soc: aspeed: fix a ternary sign expansion bug 2021-05-20 16:07:52 +08:00
soundwire soundwire: stream: fix memory leak in stream config error path 2021-05-20 16:07:48 +08:00
spi spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() 2021-05-20 16:07:50 +08:00
spmi spmi: spmi-pmic-arb: Fix hw_irq overflow 2021-04-12 12:52:39 +08:00
ssb
…
staging media: omap4iss: return error code when omap4iss_get() failed 2021-05-20 16:07:52 +08:00
target scsi: target: pscsi: Fix warning in pscsi_complete_cmd() 2021-05-20 16:07:27 +08:00
tc
…
tee tee: optee: do not check memref size on return from Secure World 2021-05-20 16:07:24 +08:00
thermal thermal/core: Add NULL pointer check before using cooling device stats 2021-05-20 16:06:47 +08:00
thunderbolt thunderbolt: Fix use-after-free in remove_unplugged_switch() 2021-03-16 16:42:03 +08:00
tty serial: core: return early on unsupported ioctls 2021-05-20 16:07:50 +08:00
uio uio: avoid to request_irq when the legacy irq is not connected 2021-03-16 16:43:58 +08:00
usb usb: dwc2: Fix hibernation between host and device modes. 2021-05-20 16:07:51 +08:00
vfio vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer 2021-05-20 16:07:53 +08:00
vhost vhost: Fix vhost_vq_reset() 2021-05-20 16:06:46 +08:00
video fbdev: zero-fill colormap in fbcmap.c 2021-05-20 16:07:23 +08:00
virt virt: vbox: Do not use wait_event_interruptible when called from kernel context 2021-04-12 12:52:10 +08:00
virtio virtio_ring: Fix two use after free bugs 2021-03-16 16:43:19 +08:00
visorbus
…
vlynq
…
vme
…
w1 w1: mxc_w1: Fix timeout resolution problem leading to bus error 2021-03-16 16:39:58 +08:00
watchdog watchdog: mei_wdt: request stop on unregister 2021-04-12 12:52:38 +08:00
xen xen/events: fix setting irq affinity 2021-05-20 16:07:06 +08:00
zorro
…
Kconfig
…
Makefile
…