Linus Torvalds
6f957724b9
Fix firmware loader uevent buffer NULL pointer dereference
...
The firmware class uevent function accessed the "fw_priv->buf" buffer
without the proper locking and testing for NULL. This is an old bug
(looks like it goes back to 2012 and commit 1244691c73 : "firmware
loader: introduce firmware_buf"), but for some reason it's triggering
only now in 4.2-rc1.
Shuah Khan is trying to bisect what it is that causes this to trigger
more easily, but in the meantime let's just fix the bug since others are
hitting it too (at least Ingo reports having seen it as well).
Reported-and-tested-by: Shuah Khan <shuahkh@osg.samsung.com>
Acked-by: Ming Lei <ming.lei@canonical.com>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2015-07-09 11:20:01 -07:00
..
power
Merge branches 'acpi-pnp', 'acpi-soc', 'pm-domains' and 'pm-sleep'
2015-07-07 22:48:14 +02:00
regmap
Merge remote-tracking branches 'regmap/topic/defaults', 'regmap/topic/irq' and 'regmap/topic/reg-params' into regmap-next
2015-06-17 17:40:08 +01:00
attribute_container.c
attribute_container: fix missing blank lines after declarations
2015-03-25 14:35:09 +01:00
base.h
driver-core: add asynchronous probing support for drivers
2015-05-20 00:25:24 -07:00
bus.c
driver-core: add asynchronous probing support for drivers
2015-05-20 00:25:24 -07:00
cacheinfo.c
Merge 4.1-rc7 into driver-core-next
2015-06-08 10:19:40 -07:00
class.c
drivers: base: class: Add a blank line after declarations
2015-03-25 14:36:19 +01:00
component.c
container.c
core.c
drivers/base/core.c: use strreplace()
2015-06-25 17:00:40 -07:00
cpu.c
show nohz_full cpus in sysfs
2015-05-20 00:15:09 -07:00
dd.c
base:dd - Fix for typo in comment to function driver_deferred_probe_trigger().
2015-06-01 10:15:17 +09:00
devcoredump.c
devres.c
devtmpfs.c
VFS: assorted weird filesystems: d_inode() annotations
2015-04-15 15:06:58 -04:00
dma-coherent.c
dma-contiguous.c
dma-mapping.c
drivers: base: dma-mapping: Erase blank space after pointer
2015-03-25 14:36:19 +01:00
driver.c
driver core: add missing blank line after declaration
2015-03-25 14:36:30 +01:00
firmware.c
firmware_class.c
Fix firmware loader uevent buffer NULL pointer dereference
2015-07-09 11:20:01 -07:00
hypervisor.c
init.c
drivers: of/base: move of_init to driver_init
2015-05-26 19:55:56 -07:00
isa.c
Kconfig
cma: make default CMA area size zero for x86
2014-12-10 17:41:06 -08:00
Makefile
Driver core patches for 3.19-rc1
2014-12-14 16:10:09 -08:00
map.c
drivers: base: map: Use kmalloc_array instead of kmalloc
2015-03-25 14:35:08 +01:00
memory.c
mm, hotplug: fix concurrent memory hot-add deadlock
2015-04-14 16:49:00 -07:00
module.c
node.c
mm: meminit: initialise a subset of struct pages if CONFIG_DEFERRED_STRUCT_PAGE_INIT is set
2015-06-30 19:44:56 -07:00
pinctrl.c
platform.c
Revert "base/platform: Only insert MEM and IO resources"
2015-06-10 08:38:29 -07:00
property.c
Merge branches 'acpi-video', 'device-properties', 'pm-sleep' and 'pm-cpuidle'
2015-06-26 03:30:37 +02:00
soc.c
drivers/base: use tabs where possible in code indentation
2015-03-25 14:37:35 +01:00
syscore.c
topology.c
sched/topology: Rename topology_thread_cpumask() to topology_sibling_cpumask()
2015-05-27 15:22:15 +02:00
transport_class.c