android_kernel_motorola_sm6375

A-Team_Digital_Solutions/android_kernel_motorola_sm6375

Watch

mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-07 20:33:58 -04:00

No description

C 98.2%
Assembly 1%
Makefile 0.3%
Shell 0.2%
Python 0.1%

Find a file

Repository files (latest commit first)
Filename	Latest commit message	Latest commit date
Zhang Xiaoxu 3524d6da0f cifs: Fix warning and UAF when destroy the MR list [ Upstream commit 3e161c2791f8e661eed24a2c624087084d910215 ] If the MR allocate failed, the MR recovery work not initialized and list not cleared. Then will be warning and UAF when release the MR: WARNING: CPU: 4 PID: 824 at kernel/workqueue.c:3066 __flush_work.isra.0+0xf7/0x110 CPU: 4 PID: 824 Comm: mount.cifs Not tainted 6.1.0-rc5+ #82 RIP: 0010:__flush_work.isra.0+0xf7/0x110 Call Trace: <TASK> __cancel_work_timer+0x2ba/0x2e0 smbd_destroy+0x4e1/0x990 _smbd_get_connection+0x1cbd/0x2110 smbd_get_connection+0x21/0x40 cifs_get_tcp_session+0x8ef/0xda0 mount_get_conns+0x60/0x750 cifs_mount+0x103/0xd00 cifs_smb3_do_mount+0x1dd/0xcb0 smb3_get_tree+0x1d5/0x300 vfs_get_tree+0x41/0xf0 path_mount+0x9b3/0xdd0 __x64_sys_mount+0x190/0x1d0 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 BUG: KASAN: use-after-free in smbd_destroy+0x4fc/0x990 Read of size 8 at addr ffff88810b156a08 by task mount.cifs/824 CPU: 4 PID: 824 Comm: mount.cifs Tainted: G W 6.1.0-rc5+ #82 Call Trace: dump_stack_lvl+0x34/0x44 print_report+0x171/0x472 kasan_report+0xad/0x130 smbd_destroy+0x4fc/0x990 _smbd_get_connection+0x1cbd/0x2110 smbd_get_connection+0x21/0x40 cifs_get_tcp_session+0x8ef/0xda0 mount_get_conns+0x60/0x750 cifs_mount+0x103/0xd00 cifs_smb3_do_mount+0x1dd/0xcb0 smb3_get_tree+0x1d5/0x300 vfs_get_tree+0x41/0xf0 path_mount+0x9b3/0xdd0 __x64_sys_mount+0x190/0x1d0 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Allocated by task 824: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 __kasan_kmalloc+0x7a/0x90 _smbd_get_connection+0x1b6f/0x2110 smbd_get_connection+0x21/0x40 cifs_get_tcp_session+0x8ef/0xda0 mount_get_conns+0x60/0x750 cifs_mount+0x103/0xd00 cifs_smb3_do_mount+0x1dd/0xcb0 smb3_get_tree+0x1d5/0x300 vfs_get_tree+0x41/0xf0 path_mount+0x9b3/0xdd0 __x64_sys_mount+0x190/0x1d0 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Freed by task 824: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 kasan_save_free_info+0x2a/0x40 ____kasan_slab_free+0x143/0x1b0 __kmem_cache_free+0xc8/0x330 _smbd_get_connection+0x1c6a/0x2110 smbd_get_connection+0x21/0x40 cifs_get_tcp_session+0x8ef/0xda0 mount_get_conns+0x60/0x750 cifs_mount+0x103/0xd00 cifs_smb3_do_mount+0x1dd/0xcb0 smb3_get_tree+0x1d5/0x300 vfs_get_tree+0x41/0xf0 path_mount+0x9b3/0xdd0 __x64_sys_mount+0x190/0x1d0 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Let's initialize the MR recovery work before MR allocate to prevent the warning, remove the MRs from the list to prevent the UAF. Fixes: `c739858334` ("CIFS: SMBD: Implement RDMA memory registration") Acked-by: Paulo Alcantara (SUSE) <pc@cjr.nz> Reviewed-by: Tom Talpey <tom@talpey.com> Signed-off-by: Zhang Xiaoxu <zhangxiaoxu5@huawei.com> Signed-off-by: Steve French <stfrench@microsoft.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-03-11 16:43:49 +01:00
arch	RISC-V: time: initialize hrtimer based broadcast clock event device	2023-03-11 16:43:42 +01:00
block	block: bio-integrity: Copy flags when bio_integrity_payload is cloned	2023-03-11 16:43:35 +01:00
certs
crypto	crypto: rsa-pkcs1pad - Use akcipher_request_complete	2023-03-11 16:43:41 +01:00
Documentation	docs: Fix path paste-o for /sys/kernel/warn_count	2023-02-06 07:52:50 +01:00
drivers	hid: bigben_probe(): validate report count	2023-03-11 16:43:49 +01:00
fs	cifs: Fix warning and UAF when destroy the MR list	2023-03-11 16:43:49 +01:00
include	ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared	2023-03-11 16:43:48 +01:00
init	init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash	2022-12-08 11:22:59 +01:00
ipc	ipc/sem: Fix dangling sem_array access in semtimedop race	2022-12-08 11:23:06 +01:00
kernel	treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()	2023-03-11 16:43:42 +01:00
lib	lib/mpi: Fix buffer overrun when SG is too long	2023-03-11 16:43:38 +01:00
LICENSES
mm	Revert "mm: Always release pages to the buddy allocator in memblock_free_late()."	2023-02-22 12:50:39 +01:00
net	wifi: mac80211: make rate u32 in sta_set_rate_info_rx()	2023-03-11 16:43:42 +01:00
samples	samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()	2023-01-18 11:41:26 +01:00
scripts	ftrace/scripts: Update the instructions for ftrace-bisect.sh	2023-02-06 07:52:44 +01:00
security	tomoyo: fix broken dependency on *.conf.default	2023-02-06 07:52:35 +01:00
sound	ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()	2023-03-11 16:43:46 +01:00
tools	selftest: fib_tests: Always cleanup before exit	2023-03-11 16:43:43 +01:00
usr
virt	KVM: arm64: vgic: Fix exit condition in scan_its_table()	2022-10-29 10:20:35 +02:00
.clang-format
.cocciconfig
.get_maintainer.ignore
.gitattributes
.gitignore
.mailmap
COPYING
CREDITS
Kbuild
Kconfig
MAINTAINERS	net/phy/mdio-i2c: Move header file to include/linux/mdio	2023-02-06 07:52:46 +01:00
Makefile	Linux 5.4.234	2023-03-03 11:41:49 +01:00
README

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.