Ilija Hadzic
1da80cfa87
drm/radeon: fix a rare case of double kfree
...
If one (but not both) allocations of p->chunks[].kpage[]
in radeon_cs_parser_init fail, the error path will free
the successfully allocated page, but leave a stale pointer
value in the kpage[] field. This will later cause a
double-free when radeon_cs_parser_fini is called.
This patch fixes the issue by forcing both pointers to NULL
after kfree in the error path.
The circumstances under which the problem happens are very
rare. The card must be AGP and the system must run out of
kmalloc area just at the right time so that one allocation
succeeds, while the other fails.
Signed-off-by: Ilija Hadzic <ihadzic@research.bell-labs.com>
Cc: Herton Ronaldo Krzesinski <herton.krzesinski@canonical.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Cc: stable@vger.kernel.org
2013-01-23 14:50:05 -05:00
..
accessibility
acpi
Merge branch 'acpi-assorted'
2013-01-04 23:10:29 +01:00
amba
Drivers: amba: remove __dev* attributes.
2013-01-03 15:57:02 -08:00
ata
Drivers: ata: remove __dev* attributes.
2013-01-03 15:57:03 -08:00
atm
Drivers: atm: remove __dev* attributes.
2013-01-03 15:57:04 -08:00
auxdisplay
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
base
Merge branch 'pm-sleep'
2013-01-06 00:36:17 +01:00
bcma
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2013-01-08 07:31:49 -08:00
block
Drivers: block: remove __dev* attributes.
2013-01-03 15:57:15 -08:00
bluetooth
bus
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
cdrom
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
char
Drivers: char: remove __dev* attributes.
2013-01-03 15:57:15 -08:00
clk
ARM: arm-soc fixes for 3.8-rc
2013-01-08 18:53:56 -08:00
clocksource
Drivers: clocksource: remove __dev* attributes.
2013-01-03 15:57:15 -08:00
connector
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
cpufreq
cpufreq / governor: Fix problem with cpufreq_ondemand or cpufreq_conservative
2013-01-03 13:11:19 +01:00
cpuidle
cpuidle: fix lock contention in the idle path
2013-01-03 13:11:06 +01:00
crypto
Drivers: crypto: remove __dev* attributes.
2013-01-03 15:57:02 -08:00
dca
devfreq
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
dio
dma
ARM: arm-soc fixes for 3.8-rc
2013-01-08 18:53:56 -08:00
edac
Two error path fixes causing a crash and a Kconfig fix for an issue
2013-01-09 08:43:56 -08:00
eisa
extcon
firewire
firmware
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
gpio
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
gpu
drm/radeon: fix a rare case of double kfree
2013-01-23 14:50:05 -05:00
hid
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
hsi
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
hv
hwmon
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
hwspinlock
i2c
i2c: remove __dev* attributes from subsystem
2012-12-22 20:13:45 +01:00
ide
Drivers: ide: remove __dev* attributes.
2013-01-03 15:57:03 -08:00
idle
intel_idle: pr_debug information need separated
2013-01-03 13:11:05 +01:00
iio
Drivers: iio: remove __dev* attributes.
2013-01-03 15:57:03 -08:00
infiniband
Drivers: infinband: remove __dev* attributes.
2013-01-03 15:57:15 -08:00
input
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2013-01-04 10:30:11 -08:00
iommu
Drivers: iommu: remove __dev* attributes.
2013-01-03 15:57:14 -08:00
ipack
irqchip
isdn
Drivers: isdn: remove __dev* attributes.
2013-01-03 15:57:02 -08:00
leds
leds: leds-gpio: set devm_gpio_request_one() flags param correctly
2013-01-02 17:58:41 -08:00
lguest
lguest: fix typo
2012-12-18 15:19:06 +10:30
macintosh
Drivers: macintosh: remove __dev* attributes.
2013-01-03 15:57:14 -08:00
md
Miscellaneous device-mapper fixes, cleanups and performance improvements.
2012-12-21 17:08:06 -08:00
media
Drivers: media: remove __dev* attributes.
2013-01-03 15:57:02 -08:00
memory
Drivers: memory: remove __dev* attributes.
2013-01-03 15:57:14 -08:00
memstick
message
Drivers: message: remove __dev* attributes.
2013-01-03 15:57:14 -08:00
mfd
Drivers: mfd: remove __dev* attributes.
2013-01-03 15:57:14 -08:00
misc
Merge git://www.linux-watchdog.org/linux-watchdog
2012-12-21 17:10:29 -08:00
mmc
Drivers: mmc: remove __dev* attributes.
2013-01-03 15:57:14 -08:00
mtd
Drivers: mtd: remove __dev* attributes.
2013-01-03 15:57:03 -08:00
net
xen/netfront: improve truesize tracking
2013-01-07 19:51:19 -08:00
nfc
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
nubus
of
of: Fix export of of_find_matching_node_and_match()
2012-12-19 10:58:53 +00:00
oprofile
parisc
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
parport
Drivers: parport: remove __dev* attributes.
2013-01-03 15:57:03 -08:00
pci
PCI: Reduce Ricoh 0xe822 SD card reader base clock frequency to 50MHz
2012-12-26 10:43:06 -07:00
pcmcia
pinctrl
ARM: arm-soc fixes for 3.8-rc
2013-01-08 18:53:56 -08:00
platform
asus-laptop: Fix potential invalid pointer dereference
2013-01-07 12:33:48 -05:00
pnp
PNP: Handle IORESOURCE_BITS in resource allocation
2013-01-03 13:10:53 +01:00
power
ARM: arm-soc fixes for 3.8-rc
2013-01-08 18:53:56 -08:00
pps
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
ps3
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
ptp
pwm
pwm: Changes for v3.8-rc1
2012-12-19 08:19:07 -08:00
rapidio
regulator
Drivers: regulator: remove __dev* attributes.
2013-01-03 15:57:04 -08:00
remoteproc
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
rpmsg
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
rtc
drivers/rtc/rtc-vt8500.c: fix handling of data passed in struct rtc_time
2013-01-04 16:11:48 -08:00
s390
s390/3215: partially revert tty close handling fix
2013-01-08 10:57:08 +01:00
sbus
Drivers: sbus: remove __dev* attributes.
2013-01-03 15:57:03 -08:00
scsi
Drivers: scsi: remove __dev* attributes.
2013-01-03 15:57:01 -08:00
sfi
sh
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
sn
Drivers: misc: remove __dev* attributes.
2013-01-03 15:57:16 -08:00
spi
spi/sh-hspi: fix return value check in hspi_probe().
2012-12-19 15:11:41 +00:00
ssb
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2013-01-08 07:31:49 -08:00
staging
drm/prime: drop reference on imported dma-buf come from gem
2013-01-08 14:41:53 +10:00
target
tc
thermal
Drivers: thermal: remove __dev* attributes.
2013-01-03 15:57:02 -08:00
tty
uio
usb
Drivers: usb: host: ehci-orion.c: remove __devinitdata marking
2013-01-03 15:57:02 -08:00
uwb
vfio
vhost
video
ARM: arm-soc fixes for 3.8-rc
2013-01-08 18:53:56 -08:00
virt
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/benh/powerpc
2012-12-18 09:58:09 -08:00
virtio
Drivers: virtio: remove __dev* attributes.
2013-01-03 15:57:01 -08:00
vlynq
Drivers: vlynq: remove __dev* attributes.
2013-01-03 15:57:01 -08:00
vme
w1
Drivers: w1: remove last __devexit_p() instance
2013-01-03 15:57:01 -08:00
watchdog
watchdog: twl4030_wdt: add DT support
2013-01-02 12:07:05 +01:00
xen
Drivers: xen: remove __dev* attributes.
2013-01-03 15:57:01 -08:00
zorro
Drivers: zorro: remove CONFIG_HOTPLUG usage
2013-01-03 15:57:01 -08:00
Kconfig
Makefile