Nikita Zhandarovich c0e73276f0 mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() ... Function mlxfw_mfa2_tlv_multi_get() returns NULL if 'tlv' in question does not pass checks in mlxfw_mfa2_tlv_payload_get(). This behaviour may lead to NULL pointer dereference in 'multi->total_len'. Fix this issue by testing mlxfw_mfa2_tlv_multi_get()'s return value against NULL. Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE. Fixes: 410ed13cae ("Add the mlxfw module for Mellanox firmware flash process") Co-developed-by: Natalia Petrova <n.petrova@fintech.ru> Signed-off-by: Nikita Zhandarovich <n.zhandarovich@fintech.ru> Reviewed-by: Ido Schimmel <idosch@nvidia.com> Link: https://lore.kernel.org/r/20230417120718.52325-1-n.zhandarovich@fintech.ru Signed-off-by: Paolo Abeni <pabeni@redhat.com>		2023-04-18 13:26:44 +02:00
..
accel	accel/ivpu: Fix S3 system suspend when not idle	2023-04-05 09:07:26 +02:00
accessibility
acpi	ACPI: video: Add acpi_backlight=video quirk for Lenovo ThinkPad W530	2023-04-05 20:23:02 +02:00
amba
android
ata	ata: pata_parport: fix memory leaks	2023-03-16 16:54:38 +09:00
atm	atm: idt77252: fix kmemleak when rmmod idt77252	2023-03-21 20:19:28 -07:00
auxdisplay
base	cacheinfo: Fix LLC is not exported through sysfs	2023-03-29 12:04:10 +02:00
bcma
block	virtio: last minute fixes	2023-04-10 13:35:54 -07:00
bluetooth	bluetooth: btbcm: Fix logic error in forming the board name.	2023-04-10 10:23:15 -07:00
bus	Devicetree fixes for v6.2, part 3:	2023-04-13 15:21:56 -07:00
cdrom
char	tpm: disable hwrng for fTPM on some AMD designs	2023-03-12 23:28:10 +02:00
clk	clk: k210: remove an implicit 64-bit division	2023-03-06 14:41:20 -08:00
clocksource
comedi
connector
counter	counter: 104-quad-8: Fix Synapse action reported for Index signals	2023-03-18 09:26:40 -04:00
cpufreq	More power management updates for 6.3-rc1	2023-03-03 10:30:58 -08:00
cpuidle	cpuidle: psci: Iterate backwards over list in psci_pd_remove()	2023-03-07 14:04:13 +01:00
crypto	This push fixes a regression in the caam driver.	2023-03-05 11:32:30 -08:00
cxl	Merge branch 'for-6.3/cxl-doe-fixes' into for-6.3/cxl	2023-04-04 15:37:25 -07:00
dax	cxl for v6.3	2023-02-25 09:19:23 -08:00
dca
devfreq
dio
dma	dmaengine: apple-admac: Fix 'current_tx' not getting freed	2023-03-31 18:17:21 +05:30
dma-buf
edac
eisa
extcon
firewire
firmware	ARM: SoC fixes for 6.3, part 2	2023-03-24 15:38:13 -07:00
fpga
fsi
gnss
gpio	gpio fixes for v6.3-rc6	2023-04-07 13:53:16 -07:00
gpu	Short summary of fixes pull:	2023-04-13 20:47:58 +02:00
greybus
hid	for-linus-2023041201	2023-04-12 17:26:00 -07:00
hsi
hte
hv	Drivers: vmbus: Check for channel allocation before looking up relids	2023-03-06 15:28:03 +00:00
hwmon	hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs	2023-03-21 19:14:55 -07:00
hwspinlock
hwtracing	coresight: etm4x: Do not access TRCIDR1 for identification	2023-03-21 12:31:02 +00:00
i2c	Devicetree fixes for v6.2, part 3:	2023-04-13 15:21:56 -07:00
i3c	I3C for 6.3	2023-02-28 16:05:01 -08:00
idle
iio	1st set of IIO fixes for 6.3	2023-03-28 13:30:55 +02:00
infiniband	v6.3 RDMA pull request	2023-02-24 15:11:03 -08:00
input	Input updates for v6.3-rc4	2023-04-01 14:09:51 -07:00
interconnect	interconnect: exynos: drop redundant link destroy	2023-03-13 21:13:48 +02:00
iommu	iommufd: Do not corrupt the pfn list when doing batch carry	2023-04-04 09:10:55 -03:00
ipack
irqchip	ARM:	2023-02-25 11:30:21 -08:00
isdn
leds
macintosh	powerpc updates for 6.3	2023-02-25 11:00:06 -08:00
mailbox
mcb
md	block-6.3-2023-03-30	2023-03-31 12:35:03 -07:00
media	Revert "venus: firmware: Correct non-pix start and end addresses"	2023-04-02 10:47:03 -07:00
memory	memory: tegra30-emc: fix interconnect registration race	2023-03-13 21:13:49 +02:00
memstick	MMC core:	2023-02-27 09:47:26 -08:00
message
mfd	Including fixes from wireless and netfilter.	2023-02-27 14:05:08 -08:00
misc	misc: ad525x_dpot-i2c: Convert to i2c's .probe_new()	2023-03-09 21:58:45 +01:00
mmc	mmc: dw_mmc-starfive: Fix initialization of prev_err	2023-03-09 15:33:51 +01:00
most
mtd	mtd: rawnand: meson: fix bitmask for length in command word	2023-04-03 17:58:01 +02:00
mux
net	mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()	2023-04-18 13:26:44 +02:00
nfc	nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition	2023-03-15 00:28:23 -07:00
ntb
nubus
nvdimm	virtio,vhost,vdpa: features, fixes	2023-02-25 11:48:02 -08:00
nvme	nvme: fix discard support without oncs	2023-04-05 17:13:17 +02:00
nvmem	nvmem: core: return -ENOENT if nvmem cell is not found	2023-03-10 10:55:49 +01:00
of	Devicetree fixes for v6.2, part 3:	2023-04-13 15:21:56 -07:00
opp
parisc
parport
pci	pci-v6.3-fixes-2	2023-04-11 11:59:49 -07:00
pcmcia
peci
perf	RISC-V Patches for the 6.3 Merge Window, Part 2	2023-03-03 09:32:51 -08:00
phy	ARM: SoC drivers for 6.3	2023-02-27 10:04:49 -08:00
pinctrl	Revert "pinctrl: amd: Disable and mask interrupts on resume"	2023-04-11 22:45:42 +02:00
platform	platform-drivers-x86 for v6.3-5	2023-04-06 10:13:23 -07:00
pnp
power	power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition	2023-03-12 23:28:04 +01:00
powercap	More power management updates for 6.3-rc1	2023-03-03 10:30:58 -08:00
pps
ps3
ptp	ptp_qoriq: fix memory leak in probe()	2023-03-24 19:17:22 -07:00
pwm	pwm: Zero-initialize the pwm_state passed to driver's .get_state()	2023-03-23 14:44:43 +01:00
rapidio
ras
regulator	regulator: Handle deferred clk	2023-03-27 01:42:01 +01:00
remoteproc	ARM: SoC drivers for 6.3	2023-02-27 10:04:49 -08:00
reset
rpmsg	rpmsg updates for v6.3	2023-02-26 12:10:28 -08:00
rtc	RTC for 6.3	2023-03-03 09:15:50 -08:00
s390	s390/vfio-ap: fix memory leak in vfio_ap device driver	2023-03-27 17:23:08 +02:00
sbus
scsi	SCSI fixes on 20230407	2023-04-08 11:57:05 -07:00
sh	sh updates for v6.3	2023-03-01 09:44:22 -08:00
siox
slimbus
soc	soc: qcom: rmtfs: handle optional qcom,vmid correctly	2023-03-06 20:13:06 -08:00
soundwire	soundwire updates for 6.3	2023-02-24 17:29:52 -08:00
spi	Devicetree fixes for v6.2, part 3:	2023-04-13 15:21:56 -07:00
spmi
ssb
staging	staging: r8188eu: delete driver	2023-03-09 10:06:28 +01:00
target	scsi: target: iscsi: Fix an error message in iscsi_check_key()	2023-03-06 16:50:42 -05:00
tc
tee	AMDTEE fix race condition in amdtee_open_session()	2023-03-17 15:30:31 +01:00
thermal	Merge branch 'thermal-intel-fixes'	2023-03-31 12:02:46 +02:00
thunderbolt	thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit	2023-03-20 19:00:58 +02:00
tty	TTY/Serial driver fixes for 6.3-rc6	2023-04-08 12:17:46 -07:00
ufs	scsi: Revert "scsi: ufs: core: Initialize devfreq synchronously"	2023-04-02 21:12:34 -04:00
uio
usb	usb: cdnsp: Fixes error: uninitialized symbol 'len'	2023-04-05 19:55:04 +02:00
vdpa	vdpa_sim_net: complete the initialization before register the device	2023-04-04 14:22:12 -04:00
vfio	vfio/mlx5: Fix the report of dirty_bytes upon pre-copy	2023-03-13 12:50:59 -06:00
vhost	vhost-scsi: Fix crash during LUN unmapping	2023-04-04 11:01:58 -04:00
video	Short summary of fixes pull:	2023-04-13 20:47:58 +02:00
virt	virt/coco/sev-guest: Add throttling awareness	2023-03-13 13:29:27 +01:00
virtio	virtio,vhost,vdpa: features, fixes	2023-02-25 11:48:02 -08:00
vlynq
w1	w1: ds2482: Convert to i2c's .probe_new()	2023-03-09 21:58:57 +01:00
watchdog	linux-watchdog 6.3-rc1 tag	2023-03-02 11:12:01 -08:00
xen	xen: branch for v6.3-rc3	2023-03-17 10:45:49 -07:00
zorro
Kconfig
Makefile	Kbuild updates for v6.3	2023-02-26 11:53:25 -08:00