linux-stable/drivers
Qiao Ma 4fd6c1d43f hinic: fix bug of wq out of bound access
commit 52b2abef45 upstream.

If wq has only one page, we need to check wqe rolling over page by
compare end_idx and curr_idx, and then copy wqe to shadow wqe to
avoid out of bound access.
This work has been done in hinic_get_wqe, but missed for hinic_read_wqe.
This patch fixes it, and removes unnecessary MASKED_WQE_IDX().

Fixes: 7dd29ee128 ("hinic: add sriov feature support")
Signed-off-by: Qiao Ma <mqaio@linux.alibaba.com>
Reviewed-by: Xunlei Pang <xlpang@linux.alibaba.com>
Link: https://lore.kernel.org/r/282817b0e1ae2e28fdf3ed8271a04e77f57bf42e.1651148587.git.mqaio@linux.alibaba.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-05-12 12:32:37 +02:00
..
accessibility
acpi ACPI: processor: idle: Avoid falling back to C3 type C-states 2022-05-09 09:16:30 +02:00
amba
android binder: Address corner cases in deferred copy and fixup 2022-05-09 09:16:14 +02:00
ata ata: pata_marvell: Check the 'bmdma_addr' beforing reading 2022-04-27 14:41:11 +02:00
atm atm: eni: Add check for dma_map_single 2022-03-15 11:01:52 +00:00
auxdisplay auxdisplay: lcd2s: Use proper API to free the instance of charlcd object 2022-03-03 00:30:31 +01:00
base topology: make core_mask include at least cluster_siblings 2022-05-09 09:16:15 +02:00
bcma
block floppy: disable FDRAWCMD by default 2022-05-09 09:16:11 +02:00
bluetooth Bluetooth: mediatek: fix the conflict between mtk and msft vendor event 2022-04-13 19:27:19 +02:00
bus bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() 2022-05-09 09:16:23 +02:00
cdrom
char ipmi:ipmi_ipmb: Fix null-ptr-deref in ipmi_unregister_smi() 2022-05-12 12:32:14 +02:00
clk clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() 2022-05-09 09:16:24 +02:00
clocksource clocksource: acpi_pm: fix return value of __setup handler 2022-04-08 13:57:38 +02:00
comedi
connector
counter counter: Stop using dev_get_drvdata() to get the counter device 2022-03-15 19:24:13 +01:00
cpufreq cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts 2022-05-09 09:16:24 +02:00
cpuidle cpuidle: qcom-spm: Check if any CPU is managed by SPM 2022-04-08 13:57:46 +02:00
crypto crypto: hisilicon/sec - not need to enable sm4 extra mode at HW V3 2022-04-08 13:58:36 +02:00
cxl cxl/port: Hold port reference until decoder release 2022-04-08 13:58:07 +02:00
dax dax: make sure inodes are flushed before destroy cache 2022-04-08 13:58:07 +02:00
dca
devfreq
dio
dma dmaengine: imx-sdma: fix init of uart scripts 2022-04-27 14:41:12 +02:00
dma-buf udmabuf: validate ubuf->pagecount 2022-04-08 13:57:56 +02:00
edac EDAC/synopsys: Read the error count from the correct register 2022-04-27 14:41:11 +02:00
eisa
extcon
firewire firewire: core: extend card->lock in fw_core_handle_bus_reset 2022-05-12 12:32:20 +02:00
firmware firmware: cs_dsp: Fix overrun of unterminated control name string 2022-04-27 14:40:57 +02:00
fpga
fsi fsi: Aspeed: Fix a potential double free 2022-04-08 13:58:24 +02:00
gnss
gpio gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) 2022-05-12 12:32:27 +02:00
gpu drm/msm/dp: remove fail safe mode related code 2022-05-12 12:32:36 +02:00
greybus greybus: svc: fix an error handling bug in gb_svc_hello() 2022-04-08 13:57:16 +02:00
hid HID: apple: Report Magic Keyboard 2021 with fingerprint reader battery over USB 2022-04-13 19:27:15 +02:00
hsi
hv Drivers: hv: balloon: Disable balloon and hot-add accordingly 2022-04-20 09:36:22 +02:00
hwmon hwmon: (pmbus) disable PEC if not enabled 2022-05-12 12:32:27 +02:00
hwspinlock
hwtracing coresight: syscfg: Fix memleak on registration failure in cscfg_create_device 2022-04-08 13:57:14 +02:00
i2c i2c: pasemi: Wait for write xfers to finish 2022-04-20 09:36:27 +02:00
i3c
idle
iio iio:dac:ad3552r: Fix an IS_ERR() vs NULL check 2022-05-09 09:16:18 +02:00
infiniband RDMA/irdma: Fix possible crash due to NULL netdev in notifier 2022-05-12 12:32:34 +02:00
input Input: cypress-sf - register a callback to disable the regulators 2022-05-09 09:16:27 +02:00
interconnect interconnect: qcom: sdx55: Drop IP0 interconnects 2022-05-09 09:16:19 +02:00
iommu iommu/dart: check return value after calling platform_get_resource() 2022-05-12 12:32:29 +02:00
ipack
irqchip irqchip/gic, gic-v3: Prevent GSI to SGI translations 2022-04-13 19:27:42 +02:00
isdn isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() 2022-03-07 11:27:12 +00:00
leds
macintosh
mailbox mailbox: imx: fix wakeup failure from freeze mode 2022-04-08 13:58:55 +02:00
mcb
md dm integrity: fix memory corruption when tag_size is less than digest size 2022-04-20 09:36:27 +02:00
media media: rockchip/rga: do proper error checking in probe 2022-04-20 09:36:12 +02:00
memory memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode 2022-05-09 09:16:21 +02:00
memstick memstick/mspro_block: fix handling of read-only devices 2022-04-08 13:58:36 +02:00
message
mfd mfd: asic3: Add missing iounmap() on error asic3_mfd_probe 2022-04-08 13:58:22 +02:00
misc eeprom: at25: Use DMA safe buffers 2022-05-09 09:16:14 +02:00
mmc mmc: core: Set HS clock speed before sending HS CMD13 2022-05-12 12:32:16 +02:00
most
mtd mtd: rawnand: qcom: fix memory corruption that causes panic 2022-05-09 09:16:29 +02:00
mux
net hinic: fix bug of wq out of bound access 2022-05-12 12:32:37 +02:00
nfc nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs 2022-05-12 12:32:26 +02:00
ntb
nubus
nvdimm nvdimm/region: Fix default alignment for small regions 2022-04-08 13:58:27 +02:00
nvme nvme-pci: disable namespace identifiers for Qemu controllers 2022-04-27 14:41:10 +02:00
nvmem nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property 2022-02-21 17:59:25 +01:00
of of/fdt: move elfcorehdr reservation early for crash dump kernel 2022-02-17 17:13:52 -06:00
opp opp: Expose of-node's name in debugfs 2022-04-13 19:27:24 +02:00
parisc parisc: Fix CPU affinity for Lasi, WAX and Dino chips 2022-04-13 19:27:26 +02:00
parport
pci PCI: hv: Propagate coherence from VMbus device to PCI device 2022-04-20 09:36:20 +02:00
pcmcia
perf arm_pmu: Validate single/group leader events 2022-04-27 14:41:15 +02:00
phy phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe() 2022-05-09 09:16:20 +02:00
pinctrl pinctrl: pistachio: fix use of irq_of_parse_and_map() 2022-05-09 09:16:22 +02:00
platform platform/x86: asus-wmi: Fix driver not binding when fan curve control probe fails 2022-05-09 09:16:25 +02:00
pnp
power power: supply: axp288_fuel_gauge: Use acpi_quirk_skip_acpi_ac_and_battery() 2022-04-13 19:27:18 +02:00
powercap powercap/dtpm_cpu: Reset per_cpu variable in the release function 2022-04-08 13:58:37 +02:00
pps pps: clients: gpio: Propagate return value from pps_gpio_probe 2022-04-08 13:58:24 +02:00
ps3
ptp ptp: replace snprintf with sysfs_emit 2022-04-13 19:27:09 +02:00
pwm pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() 2022-04-08 13:58:23 +02:00
rapidio
ras
regulator regulator: wm8994: Add an off-on delay for WM8994 variant 2022-04-20 09:36:21 +02:00
remoteproc remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region 2022-04-08 13:58:27 +02:00
reset reset: tegra-bpmp: Restore Handle errors in BPMP response 2022-04-27 14:41:06 +02:00
rpmsg
rtc rtc: wm8350: Handle error for wm8350_register_irq 2022-04-13 19:27:06 +02:00
s390 s390/dasd: Fix read inconsistency for ESE DASD devices 2022-05-12 12:32:24 +02:00
sbus
scsi scsi: sr: Do not leak information in ioctl 2022-04-27 14:41:12 +02:00
sh
siox
slimbus
soc soc: imx: imx8m-blk-ctrl: Fix IMX8MN_DISPBLK_PD_ISI hang 2022-05-09 09:16:18 +02:00
soundwire ASoC: Intel: sof_sdw: fix quirks for 2022 HP Spectre x360 13" 2022-04-08 13:58:45 +02:00
spi spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller 2022-04-27 14:41:17 +02:00
spmi
ssb
staging staging: wfx: fix an error handling in wfx_init_common() 2022-04-13 19:27:24 +02:00
target scsi: target: tcmu: Fix possible page UAF 2022-04-20 09:36:20 +02:00
tc
tee tee: optee: add missing mutext_destroy in optee_ffa_probe 2022-05-09 09:16:17 +02:00
thermal thermal: int340x: Fix attr.show callback prototype 2022-05-09 09:16:30 +02:00
thunderbolt
tty tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() 2022-05-09 09:16:33 +02:00
uio
usb USB: Fix xhci event ring dequeue pointer ERDP update issue 2022-05-09 09:16:18 +02:00
vdpa vdpa: mlx5: prevent cvq work from hogging CPU 2022-04-13 19:27:28 +02:00
vfio vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used 2022-04-20 09:36:18 +02:00
vhost tuntap: add sanity checks about msg_controllen in sendmsg 2022-04-13 19:27:19 +02:00
video video: fbdev: udlfb: properly check endpoint type 2022-05-09 09:16:17 +02:00
virt virt: acrn: fix a memory leak in acrn_dev_ioctl() 2022-04-08 13:58:30 +02:00
virtio virtio: use virtio_device_ready() in virtio_device_restore() 2022-04-08 13:58:57 +02:00
visorbus
vlynq
vme
w1 w1: w1_therm: fixes w1_seq for ds28ea00 sensors 2022-04-13 19:27:24 +02:00
watchdog watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function 2022-04-08 13:58:56 +02:00
xen xen/gnttab: fix gnttab_end_foreign_access() without page specified 2022-03-07 09:48:55 +01:00
zorro
Kconfig
Makefile