AngeloGioacchino Del Regno 00548ac6b1 remoteproc: mediatek: Make sure IPI buffer fits in L2TCM ... commit 331f91d86f upstream. The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core). Fixes: 3efa0ea743 ("remoteproc/mediatek: read IPI buffer offset from FW") Signed-off-by: AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com> Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20240321084614.45253-2-angelogioacchino.delregno@collabora.com Signed-off-by: Mathieu Poirier <mathieu.poirier@linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-05-25 16:20:18 +02:00
..
accessibility	speakup: Avoid crash on very long word	2024-04-27 17:05:28 +02:00
acpi	ACPI: CPPC: Fix access width used for PCC registers	2024-05-17 11:51:01 +02:00
amba
android	binder: fix max_thread type inconsistency	2024-05-25 16:20:18 +02:00
ata	ata: sata_gemini: Check clk_enable() result	2024-05-17 11:50:53 +02:00
atm	atm: idt77252: fix a memleak in open_card_ubr0	2024-02-23 08:54:57 +01:00
auxdisplay	auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()	2023-03-11 13:57:22 +01:00
base	driver core: Introduce device_link_wait_removal()	2024-04-10 16:19:42 +02:00
bcma
block	aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts	2024-03-26 18:21:15 -04:00
bluetooth	Bluetooth: qca: fix firmware check error path	2024-05-17 11:51:06 +02:00
bus	bus: tegra-aconnect: Update dependency to ARCH_TEGRA	2024-03-26 18:21:19 -04:00
cdrom
char	hwrng: core - Fix page fault dead lock on mmap-ed hwrng	2024-02-23 08:54:24 +01:00
clk	clk: Don't hold prepare_lock when calling kref_put()	2024-05-17 11:50:55 +02:00
clocksource	clocksource/drivers/arm_global_timer: Fix maximum prescaler value	2024-04-10 16:18:46 +02:00
comedi	comedi: vmk80xx: fix incomplete endpoint checking	2024-04-27 17:05:26 +02:00
connector
counter
cpufreq	cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return value"	2024-04-10 16:18:44 +02:00
cpuidle	cpuidle: Avoid potential overflow in integer multiplication	2024-04-13 13:01:43 +02:00
crypto	crypto: qat - resolve race condition during AER recovery	2024-04-10 16:18:35 +02:00
cxl
dax	dax/kmem: Pass valid argument to memory_group_register_static	2023-07-23 13:47:17 +02:00
dca
devfreq	PM / devfreq: Synchronize devfreq_monitor_[start/stop]	2024-02-23 08:54:38 +01:00
dio	drivers: dio: fix possible memory leak in dio_init()	2022-12-31 13:14:27 +01:00
dma	dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"	2024-05-17 11:50:43 +02:00
dma-buf	dma-buf: add dma_fence_timestamp helper	2024-02-23 08:55:10 +01:00
edac	EDAC/thunderx: Fix possible out-of-bounds string access	2024-01-25 14:52:32 -08:00
eisa	EISA: use DEVICE_ATTR_RO() helper macro	2021-06-04 15:28:34 +02:00
extcon	extcon: usbc-tusb320: Convert to i2c's .probe_new()	2023-07-23 13:47:31 +02:00
firewire	firewire: nosy: ensure user_length is taken into account when fetching packet contents	2024-05-17 11:51:01 +02:00
firmware	efivarfs: Request at most 512 bytes for variable names	2024-04-10 16:19:30 +02:00
fpga	fpga: bridge: fix kernel-doc parameter description	2023-05-11 23:00:31 +09:00
fsi
gnss
gpio	gpio: crystalcove: Use -ENOTSUPP consistently	2024-05-17 11:50:55 +02:00
gpu	drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()	2024-05-25 16:20:18 +02:00
greybus	greybus: svc: fix an error handling bug in gb_svc_hello()	2022-04-08 14:22:50 +02:00
hid	HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up	2024-05-02 16:24:50 +02:00
hsi	HSI: omap_ssi_core: Fix error handling in ssi_init()	2022-12-31 13:14:32 +01:00
hv	Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs	2023-06-28 10:29:42 +02:00
hwmon	hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us	2024-05-17 11:51:05 +02:00
hwspinlock
hwtracing	coresight: etm4x: Fix width of CCITMIN field	2024-01-25 14:52:32 -08:00
i2c	i2c: smbus: fix NULL function pointer dereference	2024-05-02 16:24:50 +02:00
i3c	i3c: master: cdns: Update maximum prescaler value for i2c clock	2024-02-23 08:54:50 +01:00
idle	intel_idle: Disable IBRS during long idle	2022-07-23 12:54:04 +02:00
iio	iio: accel: mxc4005: Interrupt handling fixes	2024-05-17 11:51:04 +02:00
infiniband	qibfs: fix dentry leak	2024-05-17 11:50:57 +02:00
input	Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails	2024-04-13 13:01:44 +02:00
interconnect	Revert "interconnect: Teach lockdep about icc_bw_lock order"	2024-03-06 14:38:50 +00:00
iommu	iommu: mtk: fix module autoloading	2024-05-17 11:50:55 +02:00
ipack	ipack: ipoctal: fix module reference leak	2021-09-27 17:38:49 +02:00
irqchip	irqchip/gic-v3-its: Prevent double free on error	2024-05-02 16:24:48 +02:00
isdn
leds	leds: sgm3140: Add missing timer cleanup and flash gpio control	2024-03-26 18:21:31 -04:00
macintosh
mailbox	mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt	2024-02-23 08:54:50 +01:00
mcb
md	md: fix kmemleak of rdev->serial	2024-05-17 11:51:06 +02:00
media	media: cec: core: remove length check of Timer Status	2024-04-17 11:15:13 +02:00
memory
memstick	memstick r592: make memstick_debug_get_tpc_name() static	2023-07-23 13:46:52 +02:00
message	scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition	2023-05-24 17:36:45 +01:00
mfd	mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref	2024-03-26 18:21:29 -04:00
misc	mei: me: add lunar lake point M DID	2024-05-17 11:51:05 +02:00
mmc	mmc: sdhci-msm: pervent access to suspended controller	2024-05-02 16:24:48 +02:00
most	most: fix control-message timeouts	2021-11-18 19:16:08 +01:00
mtd	mtd: diskonchip: work around ubsan link failure	2024-05-02 16:24:49 +02:00
mux
net	net: bcmgenet: synchronize UMAC_CMD access	2024-05-25 16:20:16 +02:00
nfc	NFC: trf7970a: disable all regulators on removal	2024-05-02 16:24:45 +02:00
ntb	NTB: fix possible name leak in ntb_register_device()	2024-03-26 18:21:28 -04:00
nubus
nvdimm
nvme	drivers/nvme: Add quirks for device 126f:2262	2024-04-13 13:01:46 +02:00
nvmem	nvmem: meson-efuse: fix function pointer type mismatch	2024-04-10 16:18:40 +02:00
of	of: dynamic: Synchronize of_changeset_destroy() with the devlink removals	2024-04-10 16:19:42 +02:00
opp	OPP: debugfs: Fix warning around icc_get_name()	2024-03-26 18:21:23 -04:00
parisc	parisc: iosapic.c: Fix sparse warnings	2023-10-06 13:18:15 +02:00
parport	parport: parport_serial: Add Brainboxes device IDs and geometry	2024-01-25 14:52:31 -08:00
pci	PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports	2024-04-10 16:19:34 +02:00
pcmcia
perf
phy	phy: tegra: xusb: Add API to retrieve the port number of phy	2024-04-10 16:18:40 +02:00
pinctrl	pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()	2024-05-25 16:20:16 +02:00
platform	platform/x86: intel-vbtn: Update tablet mode switch at end of probe	2024-04-13 13:01:48 +02:00
pnp	PNP: ACPI: fix fortify warning	2024-02-23 08:54:38 +01:00
power	power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator	2024-05-17 11:50:46 +02:00
powercap
pps	pps: clients: gpio: Propagate return value from pps_gpio_probe	2022-04-08 14:23:44 +02:00
ps3
ptp
pwm	pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan	2024-03-26 18:21:18 -04:00
rapidio	rapidio: devices: fix missing put_device in mport_cdev_open	2022-12-31 13:14:05 +01:00
ras
regulator	regulator: core: fix debugfs creation regression	2024-05-17 11:51:05 +02:00
remoteproc	remoteproc: mediatek: Make sure IPI buffer fits in L2TCM	2024-05-25 16:20:18 +02:00
reset	reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning	2024-01-25 14:52:30 -08:00
rpmsg	rpmsg: virtio: Free driver_override when rpmsg_remove()	2024-02-23 08:54:24 +01:00
rtc	rtc: mt6397: select IRQ_DOMAIN instead of depending on it	2024-03-26 18:21:34 -04:00
s390	s390/qeth: Fix kernel panic after setting hsuid	2024-05-17 11:50:51 +02:00
sbus	module: remove never implemented MODULE_SUPPORTED_DEVICE	2021-03-17 13:16:18 -07:00
scsi	scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload	2024-05-17 11:50:52 +02:00
sh
siox	siox: fix possible memory leak in siox_device_add()	2022-11-26 09:24:36 +01:00
slimbus	slimbus: qcom-ngd-ctrl: Add timeout for wait operation	2024-05-17 11:51:04 +02:00
soc	soc: fsl: qbman: Use raw spinlock for cgr_lock	2024-04-10 16:18:42 +02:00
soundwire	soundwire: stream: fix NULL pointer dereference for multi_link	2023-12-20 15:17:41 +01:00
spi	spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs	2024-05-17 11:50:47 +02:00
spmi	spmi: Add a check for remove callback when removing a SPMI driver	2023-05-11 23:00:34 +09:00
ssb
staging	staging: vc04_services: fix information leak in create_component()	2024-04-10 16:19:32 +02:00
target	scsi: target: Fix SELinux error when systemd-modules loads the target module	2024-05-17 11:50:54 +02:00
tc
tee	tee: optee: Fix kernel panic caused by incorrect error handling	2024-04-10 16:18:46 +02:00
thermal	thermal: devfreq_cooling: Fix perf state when calculate dfc res_util	2024-04-10 16:19:37 +02:00
thunderbolt	thunderbolt: Fix wake configurations after device unplug	2024-04-27 17:05:26 +02:00
tty	serial: kgdboc: Fix NMI-safety problems from keyboard reset code	2024-05-25 16:20:18 +02:00
uio	uio: Fix use-after-free in uio_open	2024-01-25 14:52:31 -08:00
usb	usb: typec: ucsi: displayport: Fix potential deadlock	2024-05-25 16:20:18 +02:00
vdpa	vdpa/mlx5: Allow CVQ size changes	2024-03-26 18:21:36 -04:00
vfio	vfio/fsl-mc: Block calling interrupt handler without trigger	2024-04-10 16:19:30 +02:00
vhost	vhost: Add smp_rmb() in vhost_vq_avail_empty()	2024-04-17 11:15:16 +02:00
video	fbdev: fix incorrect address computation in deferred IO	2024-05-02 16:24:50 +02:00
virt
virtio	virtio: reenable config if freezing device failed	2024-04-13 13:01:47 +02:00
visorbus
vlynq	bus: Make remove callback return void	2021-07-21 11:53:42 +02:00
vme
w1	w1: fix loop in w1_fini()	2023-07-23 13:47:20 +02:00
watchdog	watchdog: stm32_iwdg: initialize default timeout	2024-03-26 18:21:33 -04:00
xen	xen/events: close evtchn after mapping cleanup	2024-04-10 16:18:46 +02:00
zorro
Kconfig
Makefile