Ming Lei
875979368e
firmware loader: fix use-after-free by double abort
...
fw_priv->buf is accessed in both request_firmware_load() and
writing to sysfs file of 'loading' context, but not protected
by 'fw_lock' entirely. The patch makes sure that access on
'fw_priv->buf' is protected by the lock.
So fixes the double abort problem reported by nirinA raseliarison:
http://lkml.org/lkml/2013/6/14/188
Reported-and-tested-by: nirinA raseliarison <nirina.raseliarison@gmail.com>
Cc: Guenter Roeck <linux@roeck-us.net>
Cc: Bjorn Helgaas <bhelgaas@google.com>
Cc: stable <stable@vger.kernel.org> # 3.9
Signed-off-by: Ming Lei <ming.lei@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2013-06-18 10:41:55 -07:00
..
power
PM: Avoid calling kfree() under spinlock in dev_pm_put_subsys_data()
2013-05-12 14:04:40 +02:00
regmap
Merge remote-tracking branch 'regmap/fix/debugfs' into regmap-linus
2013-06-03 18:07:38 +01:00
attribute_container.c
drivers: base: Convert dev_printk(KERN_<LEVEL> to dev_<level>(
2012-10-30 17:38:43 -07:00
base.h
driver/base: implement subsys_virtual_register()
2013-03-12 11:36:35 -07:00
bus.c
driver core: export subsys_virtual_register
2013-05-21 09:05:52 -07:00
class.c
driver-core: constify data for class_find_device()
2013-02-06 12:18:56 -08:00
core.c
driver core: print sysfs attribute name when warning about bogus permissions
2013-05-21 09:05:52 -07:00
cpu.c
numa, cpu hotplug: change links of CPU and node when changing node number by onlining CPU
2013-04-29 15:54:39 -07:00
dd.c
PM / Runtime: Idle devices asynchronously after probe|release
2013-04-11 12:42:52 -07:00
devres.c
Linux 3.9-rc3
2013-03-17 19:40:50 -07:00
devtmpfs.c
driver core: handle user namespaces properly with the uid/gid devtmpfs change
2013-04-11 11:43:29 -07:00
dma-buf.c
dma-buf: Add debugfs support
2013-05-01 16:36:22 +05:30
dma-coherent.c
drivers: dma-coherent: Fix typo in dma_mmap_from_coherent documentation
2012-10-23 14:05:32 +02:00
dma-contiguous.c
drivers: cma: represent physical addresses as phys_addr_t
2012-12-11 09:28:09 +01:00
dma-mapping.c
[media] dma-mapping: fix dma_common_get_sgtable() conditional compilation
2012-11-27 09:42:31 -02:00
driver.c
firmware.c
firmware_class.c
firmware loader: fix use-after-free by double abort
2013-06-18 10:41:55 -07:00
hypervisor.c
init.c
isa.c
Kconfig
firmware: Make user-mode helper optional
2013-02-03 17:57:40 -08:00
Makefile
drivers/pinctrl: grab default handles from device core
2013-01-23 16:39:51 +01:00
map.c
memory.c
mm: Remove unused parameter of pages_correctly_reserved()
2013-04-29 15:54:38 -07:00
module.c
node.c
drivers/base/node.c: switch to register_hotmemory_notifier()
2013-04-29 15:54:36 -07:00
pinctrl.c
drivers/pinctrl: grab default handles from device core
2013-01-23 16:39:51 +01:00
platform.c
driver core: platform.c: fix checkpatch errors and warnings
2013-03-29 09:10:55 -07:00
soc.c
syscore.c
topology.c
transport_class.c