AngeloGioacchino Del Regno 26c6d7dc8c remoteproc: mediatek: Make sure IPI buffer fits in L2TCM ... commit 331f91d86f71d0bb89a44217cc0b2a22810bbd42 upstream. The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core). Fixes: 3efa0ea743b7 ("remoteproc/mediatek: read IPI buffer offset from FW") Signed-off-by: AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com> Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20240321084614.45253-2-angelogioacchino.delregno@collabora.com Signed-off-by: Mathieu Poirier <mathieu.poirier@linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-05-25 16:22:55 +02:00
..
accel	accel/ivpu: Fix deadlock in context_xa	2024-04-17 11:19:34 +02:00
accessibility	speakup: Avoid crash on very long word	2024-04-27 17:11:40 +02:00
acpi	ACPI: CPPC: Fix access width used for PCC registers	2024-05-02 16:32:46 +02:00
amba
android	binder: fix max_thread type inconsistency	2024-05-25 16:22:54 +02:00
ata	ata: sata_gemini: Check clk_enable() result	2024-05-17 12:02:13 +02:00
atm	atm: idt77252: fix a memleak in open_card_ubr0	2024-02-16 19:10:49 +01:00
auxdisplay
base	regmap: Add regmap_read_bypassed()	2024-05-17 12:01:59 +02:00
bcma
block	aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts	2024-03-26 18:19:19 -04:00
bluetooth	Bluetooth: qca: fix firmware check error path	2024-05-17 12:02:38 +02:00
bus	bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state	2024-04-13 13:07:38 +02:00
cache	cache: ax45mp_cache: Align end size to cache boundary in ax45mp_dma_cache_wback()	2024-03-01 13:35:08 +01:00
cdrom
cdx
char	random: handle creditable entropy from atomic process context	2024-04-27 17:11:30 +02:00
clk	clk: sunxi-ng: a64: Set minimum and maximum rate for PLL-MIPI	2024-05-17 12:02:33 +02:00
clocksource	clocksource/drivers/arm_global_timer: Fix maximum prescaler value	2024-04-03 15:28:50 +02:00
comedi	comedi: vmk80xx: fix incomplete endpoint checking	2024-04-27 17:11:39 +02:00
connector	connector/cn_proc: revert "connector: Fix proc_event_num_listeners count not cleared"	2024-02-23 09:25:01 +01:00
counter
cpufreq	cpufreq: Don't unregister cpufreq cooling on CPU hotplug	2024-04-13 13:07:32 +02:00
cpuidle	cpuidle: Avoid potential overflow in integer multiplication	2024-04-13 13:07:29 +02:00
crypto	crypto: sun8i-ce - Fix use after free in unprepare	2024-04-03 15:28:40 +02:00
cxl	cxl/core: Fix potential payload size confusion in cxl_mem_get_poison()	2024-05-02 16:32:35 +02:00
dax
dca
devfreq	PM / devfreq: Synchronize devfreq_monitor_[start/stop]	2024-02-05 20:14:15 +00:00
dio
dma	dmaengine: idxd: add a write() method for applications to submit work	2024-05-17 12:02:39 +02:00
dma-buf	dma-buf: Fix NULL pointer dereference in sanitycheck()	2024-04-10 16:35:40 +02:00
edac
eisa
extcon	extcon: fix possible name leak in extcon_dev_register()	2024-02-05 20:14:31 +00:00
firewire	firewire: ohci: fulfill timestamp for some local asynchronous transaction	2024-05-17 12:02:30 +02:00
firmware	firmware: arm_scmi: Make raw debugfs entries non-seekable	2024-04-17 11:19:27 +02:00
fpga
fsi
gnss
gpio	gpiolib: cdev: fix uninitialised kfifo	2024-05-17 12:02:26 +02:00
gpu	drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()	2024-05-25 16:22:54 +02:00
greybus
hid	HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up	2024-05-02 16:32:44 +02:00
hsi
hte
hv	Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted	2024-05-17 12:02:17 +02:00
hwmon	hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us	2024-05-17 12:02:35 +02:00
hwspinlock
hwtracing	hwtracing: hisi_ptt: Move type check to the beginning of hisi_ptt_pmu_event_init()	2024-03-26 18:20:06 -04:00
i2c	i2c: smbus: fix NULL function pointer dereference	2024-05-02 16:32:49 +02:00
i3c	i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling	2024-03-26 18:20:01 -04:00
idle
iio	iio: accel: mxc4005: Interrupt handling fixes	2024-05-17 12:02:31 +02:00
infiniband	qibfs: fix dentry leak	2024-05-17 12:02:20 +02:00
input	Input: xpad - add support for Snakebyte GAMEPADs	2024-04-13 13:07:37 +02:00
interconnect	interconnect: Don't access req_list while it's being manipulated	2024-04-27 17:11:37 +02:00
iommu	iommu: mtk: fix module autoloading	2024-05-17 12:02:17 +02:00
ipack
irqchip	irqchip/gic-v3-its: Prevent double free on error	2024-05-02 16:32:45 +02:00
isdn
leds	leds: trigger: netdev: Fix kernel panic on interface rename trig notify	2024-04-03 15:28:27 +02:00
macintosh
mailbox	mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt	2024-02-05 20:14:31 +00:00
mcb
md	md: fix kmemleak of rdev->serial	2024-05-17 12:02:39 +02:00
media	media: videobuf2: request more buffers for vb2_read	2024-04-27 17:11:30 +02:00
memory	memory: tegra: Correct DLA client names	2024-03-26 18:19:32 -04:00
memstick
message
mfd	mfd: cs42l43: Fix wrong GPIO_FN_SEL and SPI_CLK_CONFIG1 defaults	2024-03-26 18:19:55 -04:00
misc	mei: me: add lunar lake point M DID	2024-05-17 12:02:33 +02:00
mmc	mmc: core: Add HS400 tuning in HS400es initialization	2024-05-25 16:22:53 +02:00
most
mtd	mtd: limit OTP NVMEM cell parse to non-NAND devices	2024-05-17 12:01:55 +02:00
mux
net	net: usb: ax88179_178a: fix link status when link is set to down/up	2024-05-25 16:22:54 +02:00
nfc	NFC: trf7970a: disable all regulators on removal	2024-05-02 16:32:36 +02:00
ntb	NTB: fix possible name leak in ntb_register_device()	2024-03-26 18:19:48 -04:00
nubus
nvdimm
nvme	nvme-pci: Add quirk for broken MSIs	2024-05-17 12:02:36 +02:00
nvmem	nvmem: add explicit config option to read old syntax fixed OF cells	2024-05-17 12:01:55 +02:00
of	of: module: prevent NULL pointer dereference in vsnprintf()	2024-04-10 16:36:06 +02:00
opp	OPP: debugfs: Fix warning around icc_get_name()	2024-03-26 18:19:40 -04:00
parisc
parport
pci	PCI/ASPM: Fix deadlock when enabling ASPM	2024-04-27 17:11:44 +02:00
pcmcia
peci
perf	drivers/perf: hisi: Enable HiSilicon Erratum 162700402 quirk for HIP09	2024-04-13 13:07:36 +02:00
phy	phy: qcom: qmp-combo: fix VCO div offset on v5_5nm and v6	2024-05-02 16:32:49 +02:00
pinctrl	pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()	2024-05-17 12:01:58 +02:00
platform	platform/x86: ISST: Add Granite Rapids-D to HPM CPU list	2024-05-17 12:02:19 +02:00
pmdomain	pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain	2024-04-13 13:07:30 +02:00
pnp	PNP: ACPI: fix fortify warning	2024-02-05 20:14:15 +00:00
power	power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator	2024-05-17 12:01:58 +02:00
powercap	powercap: intel_rapl_tpmi: Fix System Domain probing	2024-04-03 15:28:19 +02:00
pps
ps3
ptp
pwm	pwm: img: fix pwm clock lookup	2024-04-03 15:28:52 +02:00
rapidio
ras
regulator	regulator: core: fix debugfs creation regression	2024-05-17 12:02:36 +02:00
remoteproc	remoteproc: mediatek: Make sure IPI buffer fits in L2TCM	2024-05-25 16:22:55 +02:00
reset
rpmsg
rtc	nvmem: add explicit config option to read old syntax fixed OF cells	2024-05-17 12:01:55 +02:00
s390	s390/qeth: Fix kernel panic after setting hsuid	2024-05-17 12:02:06 +02:00
sbus
scsi	scsi: hisi_sas: Handle the NCQ error returned by D2H frame	2024-05-17 12:02:15 +02:00
sh
siox
slimbus	slimbus: qcom-ngd-ctrl: Add timeout for wait operation	2024-05-17 12:02:33 +02:00
soc	soc: fsl: qbman: Use raw spinlock for cgr_lock	2024-04-03 15:28:32 +02:00
soundwire	soundwire: amd: fix for wake interrupt handling for clockstop mode	2024-05-02 16:32:47 +02:00
spi	spi: microchip-core-qspi: fix setting spi bus clock rate	2024-05-17 12:02:36 +02:00
spmi	spmi: mediatek: Fix UAF on device remove	2024-02-05 20:14:32 +00:00
ssb
staging	staging: vc04_services: fix information leak in create_component()	2024-04-03 15:28:59 +02:00
target	scsi: target: Fix SELinux error when systemd-modules loads the target module	2024-05-17 12:02:15 +02:00
tc
tee	tee: optee: Fix kernel panic caused by incorrect error handling	2024-04-03 15:28:44 +02:00
thermal	thermal/of: Assume polling-delay(-passive) 0 when absent	2024-04-13 13:07:39 +02:00
thunderbolt	thunderbolt: Reset only non-USB4 host routers in resume	2024-04-27 17:11:44 +02:00
tty	serial: kgdboc: Fix NMI-safety problems from keyboard reset code	2024-05-25 16:22:54 +02:00
ufs	scsi: ufs: core: Fix MCQ mode dev command timeout	2024-05-17 12:02:12 +02:00
uio	uio_hv_generic: Don't free decrypted memory	2024-05-17 12:02:17 +02:00
usb	usb: typec: tipd: fix event checking for tps6598x	2024-05-25 16:22:54 +02:00
vdpa	vdpa/mlx5: Allow CVQ size changes	2024-03-26 18:20:10 -04:00
vfio	VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist	2024-05-17 12:02:38 +02:00
vhost	vhost: Add smp_rmb() in vhost_enable_notify()	2024-04-17 11:19:35 +02:00
video	fbdev: fix incorrect address computation in deferred IO	2024-05-02 16:32:46 +02:00
virt
virtio	virtio: reenable config if freezing device failed	2024-04-03 15:28:36 +02:00
vlynq
w1	nvmem: add explicit config option to read old syntax fixed OF cells	2024-05-17 12:01:55 +02:00
watchdog	watchdog: stm32_iwdg: initialize default timeout	2024-03-26 18:20:02 -04:00
xen	x86/xen: attempt to inflate the memory balloon on PVH	2024-04-13 13:07:39 +02:00
zorro
Kconfig
Makefile