Christophe JAILLET
d7b2df9742
dmaengine: mcf-edma: Fix a potential un-allocated memory access ...
commit 0a46781c89dece85386885a407244ca26e5c1c44 upstream.
When 'mcf_edma' is allocated, some space is allocated for a
flexible array at the end of the struct. 'chans' item are allocated, that is
to say 'pdata->dma_channels'.
Then, this number of item is stored in 'mcf_edma->n_chans'.
A few lines later, if 'mcf_edma->n_chans' is 0, then a default value of 64
is set.
This ends to no space allocated by devm_kzalloc() because chans was 0, but
64 items are read and/or written in some not allocated memory.
Change the logic to define a default value before allocating the memory.
Fixes: e7a3ff92eahttps://lore.kernel.org/r/f55d914407c900828f6fad3ea5fa791a5f17b9a4.1685172449.git.christophe.jaillet@wanadoo.fr
Signed-off-by: Vinod Koul <vkoul@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-08-16 18:19:24 +02:00
ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
2023-08-11 11:53:53 +02:00
binder: fix memory leak in binder_init()
2023-08-16 18:19:23 +02:00
ata: pata_ns87415: mark ns87560_tf_read static
2023-08-11 11:53:49 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
drivers: core: fix kernel-doc markup for dev_err_probe()
2023-08-11 11:54:02 +02:00
loop: Select I/O scheduler 'none' from inside add_disk()
2023-08-11 11:53:54 +02:00
Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"
2023-05-17 11:35:45 +02:00
bus: imx-weim: fix branch condition evaluates to a garbage value
2023-04-05 11:16:42 +02:00
tpm_tis: Explicitly check for error code
2023-08-11 11:53:52 +02:00
clk: keystone: sci-clk: check return value of kasprintf()
2023-07-27 08:37:15 +02:00
clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
2023-07-27 08:37:05 +02:00
counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
2023-05-17 11:35:31 +02:00
cpufreq: intel_pstate: Drop ACPI _PSS states table patching
2023-08-11 11:53:53 +02:00
crypto: marvell/cesa - Fix type mismatch warning
2023-07-27 08:37:18 +02:00
dmaengine: mcf-edma: Fix a potential un-allocated memory access
2023-08-16 18:19:24 +02:00
EDAC/skx: Fix overflows on the DRAM row address mapping arrays
2023-05-17 11:35:35 +02:00
extcon: Fix kernel doc of property capability fields to avoid warnings
2023-07-27 08:37:20 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()
2023-07-27 08:37:37 +02:00
fpga: bridge: fix kernel-doc parameter description
2023-05-17 11:35:46 +02:00
WRITE is "data source", not destination...
2023-02-22 12:50:23 +01:00
gpio: tps68470: Make tps68470_gpio_output() always set the initial value
2023-08-11 11:53:44 +02:00
drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
2023-08-16 18:19:23 +02:00
HID: wacom: Use ktime_t rather than int when dealing with timestamps
2023-07-27 08:37:03 +02:00
Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
2023-06-28 10:18:36 +02:00
hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
2023-08-11 11:53:52 +02:00
coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
2023-05-30 12:44:10 +01:00
i2c: xiic: Don't try to handle more interrupt events after error
2023-07-27 08:37:24 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
iio: cros_ec: Fix the allocation size for cros_ec_command
2023-08-16 18:19:23 +02:00
IB/hfi1: Fix possible panic during hotplug remove
2023-08-16 18:19:24 +02:00
Input: adxl34x - do not hardcode interrupt trigger type
2023-07-27 08:37:13 +02:00
interconnect: fix mem leak when freeing nodes
2023-03-22 13:28:08 +01:00
iommu/amd: Don't block updates to GATag if guest mode is on
2023-06-09 10:28:52 +02:00
irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
2023-08-11 11:53:52 +02:00
mISDN: Update parameter type of dsp_cmx_send()
2023-08-16 18:19:23 +02:00
leds: TI_LMU_COMMON: select REGMAP instead of depending on it
2023-05-17 11:35:53 +02:00
macintosh: via-pmu-led: requires ATA to be set
2023-05-17 11:35:50 +02:00
mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
2023-07-27 08:37:23 +02:00
mcb-pci: Reallocate memory region to avoid memory overlapping
2023-05-30 12:44:04 +01:00
dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
2023-08-11 11:53:53 +02:00
media: usb: siano: Fix warning due to null work_func_t function pointer
2023-07-27 08:37:20 +02:00
memory: brcmstb_dpfe: fix testing array offset after use
2023-07-27 08:37:14 +02:00
memstick r592: make memstick_debug_get_tpc_name() static
2023-07-27 08:37:10 +02:00
scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
2023-05-30 12:44:03 +01:00
mfd: stmpe: Only disable the regulators if they are enabled
2023-07-27 08:37:22 +02:00
misc: pci_endpoint_test: Re-init completion for every test
2023-07-27 08:37:37 +02:00
mmc: moxart: read scr register without changing byte order
2023-08-16 18:19:22 +02:00
mtd: rawnand: omap_elm: Fix incorrect type in assignment
2023-08-11 11:54:00 +02:00
drivers: net: prevent tun_build_skb() to exceed the packet size limit
2023-08-16 18:19:24 +02:00
nfcsim.c: Fix error checking for debugfs_create_dir
2023-06-28 10:18:41 +02:00
NTB: ntb_tool: Add check for devm_kcalloc
2023-07-27 08:37:32 +02:00
nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
2023-05-17 11:35:43 +02:00
nvmem: core: fix cell removal on error
2023-02-22 12:50:28 +01:00
of: Fix modalias string generation
2023-05-17 11:35:47 +02:00
OPP: fix error checking in opp_migrate_dentry()
2023-03-11 16:43:41 +01:00
PCI/ASPM: Avoid link retraining race
2023-08-11 11:53:45 +02:00
phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
2023-08-11 11:53:47 +02:00
pinctrl: amd: Use amd_pinconf_set() for all config options
2023-07-27 08:37:43 +02:00
platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
2023-08-11 11:53:48 +02:00
power: supply: Fix logic checking if system is running from battery
2023-06-21 15:44:09 +02:00
powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
2023-07-27 08:37:06 +02:00
ptp_qoriq: fix memory leak in probe()
2023-04-05 11:16:43 +02:00
pwm: meson: fix handling of period/duty if greater than UINT_MAX
2023-08-11 11:53:46 +02:00
regulator: core: Streamline debugfs operations
2023-07-27 08:37:07 +02:00
remoteproc: st: Call of_node_put() on iteration error
2023-05-17 11:36:01 +02:00
rpmsg: glink: Avoid infinite loop on intent for missing channel
2023-03-11 16:43:53 +01:00
rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
2023-07-27 08:37:22 +02:00
scsi: zfcp: Defer fc_rport blocking until after ADISC response
2023-08-11 11:53:58 +02:00
scsi: qla2xxx: Array index may go out of bound
2023-08-11 11:53:46 +02:00
soc/fsl/qe: fix usb.c build errors
2023-07-27 08:37:14 +02:00
spi: bcm63xx: fix max prepend length
2023-07-27 08:37:43 +02:00
spmi: Add a check for remove callback when removing a SPMI driver
2023-05-17 11:35:49 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
2023-08-11 11:53:52 +02:00
scsi: target: iscsi: Prevent login threads from racing between each other
2023-06-28 10:18:40 +02:00
thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
2023-03-11 16:44:13 +01:00
thunderbolt: Use const qualifier for ring_interrupt_index
2023-04-05 11:16:39 +02:00
serial: sifive: Fix sifive_serial_console_setup() section
2023-08-11 11:53:50 +02:00
usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
2023-08-16 18:19:23 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
2023-07-27 08:37:44 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
w1: fix loop in w1_fini()
2023-07-27 08:37:19 +02:00
watchdog: menz069_wdt: fix watchdog initialisation
2023-06-09 10:28:55 +02:00
xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
2023-05-30 12:44:10 +01:00
d7b2df9742