linux-stable

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2024-09-16 07:35:14 +00:00

No description

Find a file

Dmitry Osipenko 04b31630d5 dmaengine: tegra-apb: Fix use-after-free commit `94788af4ed` upstream. I was doing some experiments with I2C and noticed that Tegra APB DMA driver crashes sometime after I2C DMA transfer termination. The crash happens because tegra_dma_terminate_all() bails out immediately if pending list is empty, and thus, it doesn't release the half-completed descriptors which are getting re-used before ISR tasklet kicks-in. tegra-i2c 7000c400.i2c: DMA transfer timeout elants_i2c 0-0010: elants_i2c_irq: failed to read data: -110 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 142 at lib/list_debug.c:45 __list_del_entry_valid+0x45/0xac list_del corruption, ddbaac44->next is LIST_POISON1 (00000100) Modules linked in: CPU: 0 PID: 142 Comm: kworker/0:2 Not tainted 5.5.0-rc2-next-20191220-00175-gc3605715758d-dirty #538 Hardware name: NVIDIA Tegra SoC (Flattened Device Tree) Workqueue: events_freezable_power_ thermal_zone_device_check [<c010e5c5>] (unwind_backtrace) from [<c010a1c5>] (show_stack+0x11/0x14) [<c010a1c5>] (show_stack) from [<c0973925>] (dump_stack+0x85/0x94) [<c0973925>] (dump_stack) from [<c011f529>] (__warn+0xc1/0xc4) [<c011f529>] (__warn) from [<c011f7e9>] (warn_slowpath_fmt+0x61/0x78) [<c011f7e9>] (warn_slowpath_fmt) from [<c042497d>] (__list_del_entry_valid+0x45/0xac) [<c042497d>] (__list_del_entry_valid) from [<c047a87f>] (tegra_dma_tasklet+0x5b/0x154) [<c047a87f>] (tegra_dma_tasklet) from [<c0124799>] (tasklet_action_common.constprop.0+0x41/0x7c) [<c0124799>] (tasklet_action_common.constprop.0) from [<c01022ab>] (__do_softirq+0xd3/0x2a8) [<c01022ab>] (__do_softirq) from [<c0124683>] (irq_exit+0x7b/0x98) [<c0124683>] (irq_exit) from [<c0168c19>] (__handle_domain_irq+0x45/0x80) [<c0168c19>] (__handle_domain_irq) from [<c043e429>] (gic_handle_irq+0x45/0x7c) [<c043e429>] (gic_handle_irq) from [<c0101aa5>] (__irq_svc+0x65/0x94) Exception stack(0xde2ebb90 to 0xde2ebbd8) Signed-off-by: Dmitry Osipenko <digetx@gmail.com> Acked-by: Jon Hunter <jonathanh@nvidia.com> Cc: <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20200209163356.6439-2-digetx@gmail.com Signed-off-by: Vinod Koul <vkoul@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-03-11 18:03:04 +01:00
arch	x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes	2020-03-11 18:03:04 +01:00
block	block: don't use bio->bi_vcnt to figure out segment number	2020-01-27 14:46:19 +01:00
certs	Replace magic for trusting the secondary keyring with #define	2018-09-09 19:55:54 +02:00
crypto	crypto: api - Fix race condition in crypto_spawn_alg	2020-02-14 16:32:14 -05:00
Documentation	PM / devfreq: Add new name attribute for sysfs	2020-02-05 14:18:12 +00:00
drivers	dmaengine: tegra-apb: Fix use-after-free	2020-03-11 18:03:04 +01:00
firmware	Fix built-in early-load Intel microcode alignment	2020-01-23 08:20:30 +01:00
fs	fat: fix uninit-memory access for partial initialized inode	2020-03-11 18:03:03 +01:00
include	include/linux/bitops.h: introduce BITS_PER_TYPE	2020-03-11 18:02:52 +01:00
init	fork: fix some -Wmissing-prototypes warnings	2019-12-05 15:37:52 +01:00
ipc	Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()"	2020-02-28 16:36:12 +01:00
kernel	kprobes: Fix optimize_kprobe()/unoptimize_kprobe() cancellation logic	2020-03-11 18:02:57 +01:00
lib	lib/stackdepot.c: fix global out-of-bounds in stack_slabs	2020-02-28 16:36:13 +01:00
mm	mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa	2020-03-11 18:03:02 +01:00
net	net: netlink: cap max groups which will be considered in netlink_bind()	2020-03-11 18:02:52 +01:00
samples	samples/bpf: Don't try to remove user's homedir on clean	2020-02-14 16:32:13 -05:00
scripts	kconfig: fix broken dependency in randconfig-generated .config	2020-02-28 16:35:59 +01:00
security	selinux: ensure we cleanup the internal AVC counters on error in avc_update()	2020-02-28 16:36:09 +01:00
sound	ALSA: seq: Fix concurrent access to queue current tick/time	2020-02-28 16:36:16 +01:00
tools	selftests: fix too long argument	2020-03-11 18:02:58 +01:00
usr	kbuild: clean compressed initramfs image	2019-10-07 18:55:14 +02:00
virt	KVM: Check for a bad hva before dropping into the ghc slow path	2020-03-11 18:02:53 +01:00
.cocciconfig
.get_maintainer.ignore
.gitattributes
.gitignore	kbuild: rpm-pkg: keep spec file until make mrproper	2018-02-13 10:19:46 +01:00
.mailmap	.mailmap: Add Maciej W. Rozycki's Imagination e-mail address	2017-11-10 12:16:15 -08:00
COPYING
CREDITS	MAINTAINERS: update TPM driver infrastructure changes	2017-11-09 17:58:40 -08:00
Kbuild
Kconfig
MAINTAINERS	MAINTAINERS: Update drm/i915 bug filing URL	2020-02-28 16:36:12 +01:00
Makefile	Linux 4.14.172	2020-02-28 16:36:17 +01:00
README

README

Linux kernel
============

This file was moved to Documentation/admin-guide/README.rst

Please notice that there are several guides for kernel developers and users.
These guides can be rendered in a number of formats, like HTML and PDF.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.
See Documentation/00-INDEX for a list of what is contained in each file.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.