linux-stable

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2024-09-13 14:14:37 +00:00

No description

Find a file

Sai Prakash Ranjan ef0a06acc6 coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() commit `5fae8a946a` upstream. commit `6f755e85c3` ("coresight: Add helper for inserting synchronization packets") removed trailing '\0' from barrier_pkt array and updated the call sites like etb_update_buffer() to have proper checks for barrier_pkt size before read but missed updating tmc_update_etf_buffer() which still reads barrier_pkt past the array size resulting in KASAN out-of-bounds bug. Fix this by adding a check for barrier_pkt size before accessing like it is done in etb_update_buffer(). BUG: KASAN: global-out-of-bounds in tmc_update_etf_buffer+0x4b8/0x698 Read of size 4 at addr ffffffd05b7d1030 by task perf/2629 Call trace: dump_backtrace+0x0/0x27c show_stack+0x20/0x2c dump_stack+0x11c/0x188 print_address_description+0x3c/0x4a4 __kasan_report+0x140/0x164 kasan_report+0x10/0x18 __asan_report_load4_noabort+0x1c/0x24 tmc_update_etf_buffer+0x4b8/0x698 etm_event_stop+0x248/0x2d8 etm_event_del+0x20/0x2c event_sched_out+0x214/0x6f0 group_sched_out+0xd0/0x270 ctx_sched_out+0x2ec/0x518 __perf_event_task_sched_out+0x4fc/0xe6c __schedule+0x1094/0x16a0 preempt_schedule_irq+0x88/0x170 arm64_preempt_schedule_irq+0xf0/0x18c el1_irq+0xe8/0x180 perf_event_exec+0x4d8/0x56c setup_new_exec+0x204/0x400 load_elf_binary+0x72c/0x18c0 search_binary_handler+0x13c/0x420 load_script+0x500/0x6c4 search_binary_handler+0x13c/0x420 exec_binprm+0x118/0x654 __do_execve_file+0x77c/0xba4 __arm64_compat_sys_execve+0x98/0xac el0_svc_common+0x1f8/0x5e0 el0_svc_compat_handler+0x84/0xb0 el0_svc_compat+0x10/0x50 The buggy address belongs to the variable: barrier_pkt+0x10/0x40 Memory state around the buggy address: ffffffd05b7d0f00: fa fa fa fa 04 fa fa fa fa fa fa fa 00 00 00 00 ffffffd05b7d0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffffffd05b7d1000: 00 00 00 00 00 00 fa fa fa fa fa fa 00 00 00 03 ^ ffffffd05b7d1080: fa fa fa fa 00 02 fa fa fa fa fa fa 03 fa fa fa ffffffd05b7d1100: fa fa fa fa 00 00 00 00 05 fa fa fa fa fa fa fa ================================================================== Link: https://lore.kernel.org/r/20210505093430.18445-1-saiprakash.ranjan@codeaurora.org Fixes: `0c3fc4d5fa` ("coresight: Add barrier packet for synchronisation") Cc: stable@vger.kernel.org Signed-off-by: Sai Prakash Ranjan <saiprakash.ranjan@codeaurora.org> Signed-off-by: Suzuki K Poulose <suzuki.poulose@arm.com> Signed-off-by: Mathieu Poirier <mathieu.poirier@linaro.org> Link: https://lore.kernel.org/r/20210614175901.532683-6-mathieu.poirier@linaro.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-07-19 08:53:17 +02:00
arch	MIPS: fix "mipsel-linux-ld: decompress.c:undefined reference to `memmove'"	2021-07-19 08:53:16 +02:00
block	rq-qos: fix missed wake-ups in rq_qos_throttle try two	2021-07-19 08:53:16 +02:00
certs	certs: Move load_system_certificate_list to a common function	2021-06-30 08:47:55 -04:00
crypto	crypto: shash - avoid comparing pointers to exported functions under CFI	2021-07-14 16:53:13 +02:00
Documentation	clocksource: Retry clock read if long delays detected	2021-07-14 16:53:18 +02:00
drivers	coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()	2021-07-19 08:53:17 +02:00
fs	ubifs: Fix races between xattr_{set\|get} and listxattr operations	2021-07-19 08:53:16 +02:00
include	rq-qos: fix missed wake-ups in rq_qos_throttle try two	2021-07-19 08:53:16 +02:00
init	kbuild: add CONFIG_LD_IS_LLD	2021-06-30 08:47:44 -04:00
ipc	ipc/util.c: sysvipc_find_ipc() incorrectly updates position index	2020-05-20 08:20:16 +02:00
kernel	tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT	2021-07-19 08:53:17 +02:00
lib	seq_buf: Fix overflow in seq_buf_putmem_hex()	2021-07-19 08:53:16 +02:00
LICENSES
mm	mm/z3fold: fix potential memory leak in z3fold_destroy_pool()	2021-07-14 16:53:47 +02:00
net	sctp: add size validation when walking chunks	2021-07-19 08:53:13 +02:00
samples	samples/bpf: Fix the error return code of xdp_redirect's main()	2021-07-14 16:53:30 +02:00
scripts	kbuild: Fix objtool dependency for 'OBJECT_FILES_NON_STANDARD_<obj> := n'	2021-07-14 16:53:20 +02:00
security	selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC	2021-07-19 08:53:10 +02:00
sound	ASoC: tegra: Set driver_name=tegra for all machine drivers	2021-07-19 08:53:16 +02:00
tools	perf bench: Fix 2 memory sanitizer warnings	2021-07-19 08:53:14 +02:00
usr	initramfs: restore default compression behavior	2020-04-08 09:08:38 +02:00
virt	KVM: do not allow mapping valid but non-reference-counted pages	2021-06-30 08:47:50 -04:00
.clang-format	clang-format: Update with the latest for_each macro list	2019-08-31 10:00:51 +02:00
.cocciconfig
.get_maintainer.ignore
.gitattributes
.gitignore	Modules updates for v5.4	2019-09-22 10:34:46 -07:00
.mailmap	ARM: SoC fixes	2019-11-10 13:41:59 -08:00
COPYING
CREDITS	MAINTAINERS: Remove Simon as Renesas SoC Co-Maintainer	2019-10-10 08:12:51 -07:00
Kbuild
Kconfig
MAINTAINERS	Documentation/llvm: add documentation on building w/ Clang/LLVM	2020-08-26 10:40:46 +02:00
Makefile	Linux 5.4.132	2021-07-14 16:53:49 +02:00
README

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.