TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
483c8fa00e22d4b3d46131bb5886d981caa2b0c8
twx-linux/drivers
T
History
Lukas Wunner 483c8fa00e spi: spi-sh: Fix use-after-free on unbind 
commit e77df3eca1 upstream.

spi_sh_remove() accesses the driver's private data after calling
spi_unregister_master() even though that function releases the last
reference on the spi_master and thereby frees the private data.

Fix by switching over to the new devm_spi_alloc_master() helper which
keeps the private data accessible until the driver has unbound.

Fixes: 680c1305e2 ("spi/spi_sh: use spi_unregister_master instead of spi_master_put in remove path")
Signed-off-by: Lukas Wunner <lukas@wunner.de>
Cc: <stable@vger.kernel.org> # v3.0+: 5e844cc37a: spi: Introduce device-managed SPI controller allocation
Cc: <stable@vger.kernel.org> # v3.0+
Cc: Axel Lin <axel.lin@ingics.com>
Link: https://lore.kernel.org/r/6d97628b536baf01d5e3e39db61108f84d44c8b2.1607286887.git.lukas@wunner.de
Signed-off-by: Mark Brown <broonie@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-12-29 13:47:09 +01:00
..
accessibility
…
acpi
ACPI: PNP: compare the string length in the matching_id()
2020-12-29 13:47:05 +01:00
amba
…
android
…
ata
ata: sata_rcar: Fix DMA boundary mask
2020-11-05 11:06:52 +01:00
atm
atm: nicstar: Unmap DMA on send error
2020-11-24 13:05:36 +01:00
auxdisplay
…
base
PM: runtime: Resume the device earlier in __device_release_driver()
2020-11-10 10:29:07 +01:00
bcma
…
block
xen/blkback: use lateeoi irq binding
2020-11-18 18:28:01 +01:00
bluetooth
…
bus
mips: cdmm: fix use-after-free in mips_cdmm_bus_discover
2020-12-29 13:46:56 +01:00
cdrom
…
char
random32: make prandom_u32() output unpredictable
2020-11-18 18:28:00 +01:00
clk
clk: sunxi-ng: Make sure divider tables have sentinel
2020-12-29 13:47:03 +01:00
clocksource
clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI
2020-12-29 13:46:59 +01:00
connector
…
cpufreq
cpufreq: scpi: Add missing MODULE_ALIAS
2020-12-29 13:46:59 +01:00
cpuidle
…
crypto
crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
2020-12-29 13:46:54 +01:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
2020-12-02 08:34:42 +01:00
dma-buf
…
edac
EDAC/amd64: Fix PCI component registration
2020-12-29 13:47:06 +01:00
eisa
…
extcon
extcon: max77693: Fix modalias string
2020-12-29 13:47:01 +01:00
firewire
…
firmware
…
fmc
…
fpga
…
fsi
…
gpio
gpio: mvebu: fix potential user-after-free on probe
2020-12-29 13:46:47 +01:00
gpu
drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor()
2020-12-29 13:47:09 +01:00
hid
HID: i2c-hid: add Vero K147 to descriptor override
2020-12-29 13:46:49 +01:00
hsi
HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
2020-12-29 13:46:56 +01:00
hv
hv_balloon: disable warning when floor reached
2020-11-18 18:27:53 +01:00
hwmon
…
hwspinlock
…
hwtracing
…
i2c
i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc()
2020-12-11 13:39:06 +01:00
ide
…
idle
…
iio
iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode
2020-11-24 13:05:54 +01:00
infiniband
RDMA/cxgb4: Validate the number of CQEs
2020-12-29 13:46:55 +01:00
input
Input: cyapa_gen6 - fix out-of-bounds stack access
2020-12-29 13:47:04 +01:00
iommu
iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs
2020-12-11 13:39:06 +01:00
ipack
…
irqchip
irqchip/alpine-msi: Fix freeing of interrupts on allocation error path
2020-12-29 13:47:01 +01:00
isdn
…
leds
leds: bcm6328, bcm6358: use devres LED registering function
2020-11-05 11:06:58 +01:00
lightnvm
…
macintosh
…
mailbox
mailbox: avoid timer start from callback
2020-10-29 09:07:11 +01:00
mcb
…
md
dm ioctl: fix error return code in target_message
2020-12-29 13:46:58 +01:00
media
media: netup_unidvb: Don't leak SPI master in probe error path
2020-12-29 13:47:04 +01:00
memory
memory: emif: Remove bogus debugfs error handling
2020-11-05 11:06:57 +01:00
memstick
memstick: r592: Fix error return in r592_probe()
2020-12-29 13:46:58 +01:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2020-11-05 11:06:59 +01:00
mfd
misc: rtsx: Fix memory leak in rtsx_pci_probe
2020-10-29 09:07:17 +01:00
misc
mei: protect mei_cl_mtu from null dereference
2020-11-18 18:27:58 +01:00
mmc
mmc: via-sdmmc: Fix data race bug
2020-11-05 11:06:55 +01:00
mtd
ubi: check kthread_should_stop() after the setting of task state
2020-11-05 11:07:03 +01:00
mux
…
net
qlcnic: Fix error code in probe
2020-12-29 13:47:03 +01:00
nfc
nfc: s3fwrn5: Release the nfc firmware
2020-12-29 13:47:02 +01:00
ntb
NTB: hw: amd: fix an issue about leak system resources
2020-10-29 09:07:14 +01:00
nubus
…
nvdimm
…
nvme
nvme: free sq/cq dbbuf pointers when dbbuf set fails
2020-12-02 08:34:41 +01:00
nvmem
…
of
of/address: Fix of_node memory leak in of_dma_is_coherent
2020-11-18 18:27:57 +01:00
oprofile
…
parisc
…
parport
…
pci
PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup()
2020-12-29 13:47:04 +01:00
pcmcia
…
perf
…
phy
phy: tegra: xusb: Fix dangling pointer on probe failure
2020-12-02 08:34:42 +01:00
pinctrl
pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe()
2020-12-29 13:46:58 +01:00
platform
platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE
2020-12-29 13:46:43 +01:00
pnp
…
power
power: supply: bq24190_charger: fix reference leak
2020-12-29 13:46:56 +01:00
powercap
powercap: restrict energy meter to root access
2020-11-10 21:10:28 +01:00
pps
…
ps3
powerpc/ps3: use dma_mapping_error()
2020-12-29 13:47:02 +01:00
ptp
…
pwm
pwm: lp3943: Dynamically allocate PWM chip base
2020-12-29 13:47:03 +01:00
rapidio
rapidio: fix the missed put_device() for rio_mport_add_riodev
2020-10-29 09:07:11 +01:00
ras
…
regulator
regulator: workaround self-referent regulators
2020-11-24 13:05:55 +01:00
remoteproc
…
reset
…
rpmsg
…
rtc
rtc: rx8010: don't modify the global rtc ops
2020-11-05 11:07:04 +01:00
s390
s390/dasd: fix list corruption of lcu list
2020-12-29 13:47:06 +01:00
sbus
…
scsi
scsi: fnic: Fix error return code in fnic_probe()
2020-12-29 13:47:00 +01:00
sfi
…
sh
…
sn
…
soc
drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe
2020-12-29 13:46:54 +01:00
spi
spi: spi-sh: Fix use-after-free on unbind
2020-12-29 13:47:09 +01:00
spmi
…
ssb
…
staging
staging: comedi: mf6x4: Fix AI end-of-conversion detection
2020-12-29 13:47:06 +01:00
target
scsi: target: iscsi: Fix cmd abort fabric stop race
2020-12-02 08:34:42 +01:00
tc
…
tee
…
thermal
…
thunderbolt
thunderbolt: Add the missed ida_simple_remove() in ring_request_msix()
2020-11-18 18:27:58 +01:00
tty
serial_core: Check for port state when tty is in error state
2020-12-29 13:46:49 +01:00
uio
uio: Fix use-after-free in uio_unregister_device()
2020-11-18 18:27:58 +01:00
usb
USB: serial: keyspan_pda: fix write unthrottling
2020-12-29 13:47:07 +01:00
uwb
…
vfio
vfio-pci: Use io_remap_pfn_range() for PCI IO memory
2020-12-29 13:46:57 +01:00
vhost
vringh: fix __vringh_iov() when riov and wiov are different
2020-11-05 11:07:04 +01:00
video
video: hyperv_fb: Fix the cache type when mapping the VRAM
2020-12-02 08:34:43 +01:00
virt
drivers/virt/fsl_hypervisor: Fix error handling path
2020-10-29 09:07:05 +01:00
virtio
…
vlynq
…
vme
…
w1
w1: mxc_w1: Fix timeout resolution problem leading to bus error
2020-11-05 11:06:59 +01:00
watchdog
watchdog: coh901327: add COMMON_CLK dependency
2020-12-29 13:47:02 +01:00
xen
xen/events: block rogue events for some time
2020-11-18 18:28:02 +01:00
zorro
…
Kconfig
…
Makefile
…