Manish Chopra
639e979a7d
qed: fix LL2 RX buffer allocation ...
commit 2f3389c73832ad90b63208c0fc281ad080114c7a upstream.
Driver allocates the LL2 rx buffers from kmalloc()
area to construct the skb using slab_build_skb()
The required size allocation seems to have overlooked
for accounting both skb_shared_info size and device
placement padding bytes which results into the below
panic when doing skb_put() for a standard MTU sized frame.
skbuff: skb_over_panic: text:ffffffffc0b0225f len:1514 put:1514
head:ff3dabceaf39c000 data:ff3dabceaf39c042 tail:0x62c end:0x566
dev:<NULL>
…
skb_panic+0x48/0x4a
skb_put.cold+0x10/0x10
qed_ll2b_complete_rx_packet+0x14f/0x260 [qed]
qed_ll2_rxq_handle_completion.constprop.0+0x169/0x200 [qed]
qed_ll2_rxq_completion+0xba/0x320 [qed]
qed_int_sp_dpc+0x1a7/0x1e0 [qed]
This patch fixes this by accouting skb_shared_info and device
placement padding size bytes when allocating the buffers.
Cc: David S. Miller <davem@davemloft.net>
Fixes: 0a7fb11c23
2023-10-25 11:53:21 +02:00
perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
2023-09-23 11:00:03 +02:00
amba: bus: fix refcount leak
2023-09-23 10:59:52 +02:00
binder: fix memory leak in binder_init()
2023-08-16 18:19:23 +02:00
ata: libata-core: Do not register PM operations for SAS ports
2023-10-10 21:46:42 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
regmap: fix NULL deref on lookup
2023-10-25 11:53:21 +02:00
rbd: take header_rwsem in rbd_dev_refresh() only when updating
2023-10-10 21:46:42 +02:00
Bluetooth: vhci: Fix race when opening vhci device
2023-10-25 11:53:20 +02:00
bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up
2023-10-10 21:46:39 +02:00
parisc: sba: Fix compile warning wrt list of SBA devices
2023-10-10 21:46:39 +02:00
clk: tegra: fix error return case for recalc_rate
2023-10-10 21:46:39 +02:00
clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
2023-07-27 08:37:05 +02:00
cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
2023-09-23 10:59:56 +02:00
crypto: stm32 - fix loop iterating through scatterlist for DMA
2023-09-23 10:59:56 +02:00
PM / devfreq: Fix leak in devfreq_dev_release()
2023-09-23 10:59:54 +02:00
dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
2023-10-25 11:53:20 +02:00
dma-buf/sw_sync: Avoid recursive lock during fence signal
2023-08-30 16:27:28 +02:00
extcon: Fix kernel doc of property capability fields to avoid warnings
2023-07-27 08:37:20 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
2023-09-23 10:59:37 +02:00
fpga: bridge: fix kernel-doc parameter description
2023-05-17 11:35:46 +02:00
fsi: master-ast-cf: Add MODULE_FIRMWARE macro
2023-09-23 10:59:37 +02:00
gpio: pxa: disable pinctrl calls for MMP_GPIO
2023-10-10 21:46:45 +02:00
drm/vmwgfx: fix typo of sizeof argument
2023-10-25 11:53:18 +02:00
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
2023-10-25 11:53:17 +02:00
Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
2023-06-28 10:18:36 +02:00
hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
2023-08-11 11:53:52 +02:00
coresight: tmc: Explicit type conversions to prevent integer overflow
2023-09-23 10:59:50 +02:00
i2c: i801: unregister tco_pdev in i801_probe() error path
2023-10-10 21:46:41 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
2023-10-25 11:53:19 +02:00
RDMA/cxgb4: Check skb value for failure to allocate
2023-10-25 11:53:17 +02:00
Input: xpad - add PXN V900 support
2023-10-25 11:53:19 +02:00
interconnect: Do not skip aggregation for disabled paths
2023-08-30 16:27:27 +02:00
iommu/vt-d: Fix to flush cache of PASID directory table
2023-09-23 10:59:50 +02:00
irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
2023-08-30 16:27:27 +02:00
mISDN: Update parameter type of dsp_cmx_send()
2023-08-16 18:19:23 +02:00
leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
2023-08-30 16:27:14 +02:00
macintosh: via-pmu-led: requires ATA to be set
2023-05-17 11:35:50 +02:00
mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
2023-07-27 08:37:23 +02:00
mcb: remove is_added flag from mcb_device struct
2023-10-25 11:53:19 +02:00
md/raid1: fix error: ISO C90 forbids mixed declarations
2023-09-23 11:00:06 +02:00
media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
2023-09-23 11:00:05 +02:00
memory: brcmstb_dpfe: fix testing array offset after use
2023-07-27 08:37:14 +02:00
memstick r592: make memstick_debug_get_tpc_name() static
2023-07-27 08:37:10 +02:00
scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
2023-05-30 12:44:03 +01:00
mfd: stmpe: Only disable the regulators if they are enabled
2023-07-27 08:37:22 +02:00
misc: pci_endpoint_test: Re-init completion for every test
2023-07-27 08:37:37 +02:00
mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
2023-09-23 11:00:03 +02:00
ubi: Refuse attaching if mtd's erasesize is 0
2023-10-10 21:46:43 +02:00
qed: fix LL2 RX buffer allocation
2023-10-25 11:53:21 +02:00
nfcsim.c: Fix error checking for debugfs_create_dir
2023-06-28 10:18:41 +02:00
ntb: Fix calculation ntb_transport_tx_free_entry()
2023-09-23 10:59:55 +02:00
nvme-pci: do not set the NUMA node of device if it has none
2023-10-10 21:46:40 +02:00
of: unittest: Fix overlay type in apply/revert check
2023-09-23 10:59:46 +02:00
OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
2023-09-23 10:59:40 +02:00
parisc: iosapic.c: Fix sparse warnings
2023-10-10 21:46:39 +02:00
Revert "PCI: qcom: Disable write access to read only registers for IP v2.3.3"
2023-10-10 21:46:42 +02:00
pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
2023-08-30 16:27:10 +02:00
perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
2023-09-23 11:00:03 +02:00
phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
2023-09-23 10:59:53 +02:00
pinctrl: avoid unsafe code pattern in find_pinctrl()
2023-10-25 11:53:19 +02:00
platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
2023-09-23 11:00:02 +02:00
power: supply: Fix logic checking if system is running from battery
2023-06-21 15:44:09 +02:00
powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
2023-07-27 08:37:06 +02:00
pwm: hibvt: Explicitly set .polarity in .get_state()
2023-10-25 11:53:17 +02:00
regulator: core: Streamline debugfs operations
2023-07-27 08:37:07 +02:00
remoteproc: st: Call of_node_put() on iteration error
2023-05-17 11:36:01 +02:00
rpmsg: glink: Add check for kstrdup
2023-09-23 10:59:53 +02:00
rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
2023-09-23 10:59:36 +02:00
scsi: zfcp: Fix a double put in zfcp_port_enqueue()
2023-10-10 21:46:42 +02:00
scsi: qla2xxx: Fix deletion race condition
2023-10-10 21:46:38 +02:00
soc: qcom: qmi_encdec: Restrict string length in decode
2023-09-23 10:59:57 +02:00
spi: nxp-fspi: reset the FLSHxCR1 registers
2023-10-10 21:46:40 +02:00
spmi: Add a check for remove callback when removing a SPMI driver
2023-05-17 11:35:49 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
staging: rtl8712: fix race condition
2023-09-23 10:59:37 +02:00
scsi: target: core: Fix deadlock due to recursive locking
2023-10-10 21:46:43 +02:00
serial: 8250_port: Check IRQ data before use
2023-10-10 21:46:41 +02:00
usb: hub: Guard against accesses to uninitialized BOS descriptors
2023-10-25 11:53:20 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
fbdev/sh7760fb: Depend on FB=y
2023-10-10 21:46:40 +02:00
virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
2023-09-23 10:59:53 +02:00
w1: fix loop in w1_fini()
2023-07-27 08:37:19 +02:00
watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running
2023-10-10 21:46:40 +02:00
xen/events: replace evtchn_rwlock with RCU
2023-10-10 21:46:46 +02:00
639e979a7d