TechPanelGM/kernel_xiaomi_sm8250
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
bb43628a780669ca28e8d6157c2e2fe433b0b8d9
kernel_xiaomi_sm8250/drivers
History
Tomi Valkeinen bb43628a78 drm/omap: Fix locking in omap_gem_new_dmabuf() 
[ Upstream commit e6a1c4037227539373c8cf484ace83833e2ad6a2 ]

omap_gem_new_dmabuf() creates the new gem object, and then takes and
holds the omap_obj->lock for the rest of the function. This has two
issues:

- omap_gem_free_object(), which is called in the error paths, also takes
  the same lock, leading to deadlock
- Even if the above wouldn't happen, in the error cases
  omap_gem_new_dmabuf() still unlocks omap_obj->lock, even after the
  omap_obj has already been freed.

Furthermore, I don't think there's any reason to take the lock at all,
as the object was just created and not yet shared with anyone else.

To fix all this, drop taking the lock.

Fixes: 3cbd0c587b ("drm/omap: gem: Replace struct_mutex usage with omap_obj private lock")
Reported-by: Dan Carpenter <dan.carpenter@linaro.org>
Closes: https://lore.kernel.org/all/511b99d7-aade-4f92-bd3e-63163a13d617@stanley.mountain/
Reviewed-by: Sebastian Reichel <sebastian.reichel@collabora.com>
Signed-off-by: Tomi Valkeinen <tomi.valkeinen@ideasonboard.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20240806-omapdrm-misc-fixes-v1-3-15d31aea0831@ideasonboard.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-12-05 10:59:32 +01:00
..
accessibility
…
acpi
acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
2024-12-05 10:59:30 +01:00
amba
amba: bus: fix refcount leak
2023-09-23 10:48:09 +02:00
android
binder: fix hang of unregistered readers
2024-08-19 05:32:04 +02:00
ata
ata: sata_sil: Rename sil_blacklist to sil_quirks
2024-11-08 16:19:12 +01:00
atm
atm: idt77252: prevent use after free in dequeue_rx()
2024-09-04 13:13:00 +02:00
auxdisplay
…
base
regmap: irq: Set lockdep class for hierarchical IRQ domains
2024-12-05 10:59:31 +01:00
bcma
…
block
aoe: fix the potential use-after-free problem in more places
2024-11-08 16:19:14 +01:00
bluetooth
Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
2024-11-08 16:19:19 +01:00
bus
bus: tegra-aconnect: Update dependency to ARCH_TEGRA
2024-03-26 18:22:35 -04:00
cdrom
…
char
virtio_console: fix misc probe bugs
2024-11-08 16:19:16 +01:00
clk
clk: Fix slab-out-of-bounds error in devm_clk_release()
2024-11-08 16:19:20 +01:00
clocksource
clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
2024-11-08 16:19:04 +01:00
connector
…
cpufreq
cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
2023-12-08 08:43:26 +01:00
cpuidle
sched,idle,rcu: Push rcu_idle deeper into the idle path
2023-10-25 11:16:26 +02:00
crypto
crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
2024-12-05 10:59:31 +01:00
dax
…
dca
…
devfreq
PM / devfreq: Fix leak in devfreq_dev_release()
2023-09-23 10:48:10 +02:00
dio
…
dma
dmaengine: ioatdma: Fix missing kmem_cache_destroy()
2024-07-05 09:00:28 +02:00
dma-buf
dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
2024-06-16 13:23:37 +02:00
edac
EDAC/fsl_ddr: Fix bad bit shift operations
2024-12-05 10:59:30 +01:00
eisa
…
extcon
extcon: max8997: select IRQ_DOMAIN instead of depending on it
2024-06-16 13:23:33 +02:00
firewire
firewire: nosy: ensure user_length is taken into account when fetching packet contents
2024-05-17 11:42:42 +02:00
firmware
firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
2024-12-05 10:59:32 +01:00
fmc
…
fpga
fpga: bridge: fix kernel-doc parameter description
2023-05-17 11:13:15 +02:00
fsi
fsi: master-ast-cf: Add MODULE_FIRMWARE macro
2023-09-23 10:47:57 +02:00
gnss
…
gpio
gpio: aspeed: Use devm_clk api to manage clock source
2024-11-08 16:19:18 +01:00
gpu
drm/omap: Fix locking in omap_gem_new_dmabuf()
2024-12-05 10:59:32 +01:00
hid
HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
2024-11-17 14:58:08 +01:00
hsi
…
hv
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
2024-09-12 11:02:54 +02:00
hwmon
hwmon: (ntc_thermistor) fix module autoloading
2024-11-08 16:19:05 +01:00
hwspinlock
…
hwtracing
coresight: tmc: sg: Do not leak sg_table
2024-11-08 16:19:08 +01:00
i2c
i2c: i801: Use a different adapter-name for IDF adapters
2024-11-08 16:19:17 +01:00
ide
treewide: Remove uninitialized_var() usage
2023-08-11 11:45:01 +02:00
idle
…
iio
iio: light: opt3001: add missing full-scale range value
2024-11-08 16:19:19 +01:00
infiniband
RDMA/bnxt_re: Return more meaningful error
2024-11-08 16:19:20 +01:00
input
Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
2024-11-08 16:19:16 +01:00
iommu
iommu/vt-d: Handle volatile descriptor status read
2024-09-12 11:02:53 +02:00
ipack
…
irqchip
irqchip/gic-v3: Force propagation of the active state with a read-back
2024-11-17 14:58:07 +01:00
isdn
mISDN: Fix a use after free in hfcmulti_tx()
2024-08-19 05:32:07 +02:00
leds
leds: ss4200: Convert PCIBIOS_* return codes to errnos
2024-08-19 05:32:04 +02:00
lightnvm
…
macintosh
macintosh/therm_windtunnel: fix module unload.
2024-08-19 05:32:01 +02:00
mailbox
mailbox: bcm2835: Fix timeout during suspend mode
2024-11-08 16:19:10 +01:00
mcb
mcb: fix error handling for different scenarios when parsing
2023-11-28 16:46:35 +00:00
md
dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
2024-11-17 14:58:06 +01:00
media
media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
2024-12-05 10:59:28 +01:00
memory
…
memstick
memstick r592: make memstick_debug_get_tpc_name() static
2023-08-11 11:45:06 +02:00
message
scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
2023-05-30 12:42:09 +01:00
mfd
mfd: omap-usb-tll: Use struct_size to allocate tll
2024-08-19 05:31:59 +02:00
misc
misc: sgi-gru: Don't disable preemption in GRU driver
2024-11-08 16:19:23 +01:00
mmc
mmc: mmc_spi: drop buggy snprintf()
2024-12-05 10:59:31 +01:00
mtd
mtd: slram: insert break after errors in parsing the map
2024-11-08 16:19:05 +01:00
mux
…
net
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
2024-12-05 10:59:32 +01:00
nfc
NFC: trf7970a: disable all regulators on removal
2024-05-02 16:17:11 +02:00
ntb
ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
2024-11-08 16:19:07 +01:00
nubus
…
nvdimm
nd_btt: Make BTT lanes preemptible
2023-11-20 10:29:18 +01:00
nvme
nvme: fix metadata handling in nvme-passthrough
2024-12-05 10:59:30 +01:00
nvmem
nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
2024-09-12 11:02:54 +02:00
of
of/irq: Support #msi-cells=<0> in of_msi_get_domain
2024-11-08 16:19:14 +01:00
opp
…
oprofile
…
parisc
parisc: iosapic.c: Fix sparse warnings
2023-10-10 21:44:58 +02:00
parport
parport: Proper fix for array out-of-bounds access
2024-11-08 16:19:20 +01:00
pci
PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
2024-11-08 16:19:19 +01:00
pcmcia
pcmcia: Use resource_size function on resource object
2024-09-12 11:02:51 +02:00
perf
…
phy
phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
2024-02-23 08:12:53 +01:00
pinctrl
pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
2024-11-08 16:19:07 +01:00
platform
platform/x86: dell-smbios: Fix error path in dell_smbios_init()
2024-09-12 11:02:52 +02:00
pnp
PNP: ACPI: fix fortify warning
2024-02-23 08:12:44 +01:00
power
power: reset: brcmstb: Do not go into infinite loop if reset fails
2024-11-08 16:19:12 +01:00
powercap
powercap: fix possible name leak in powercap_register_zone()
2023-03-11 16:31:36 +01:00
pps
pps: add an error check in parport_attach
2024-11-08 16:19:10 +01:00
ps3
…
ptp
ptp: Fix error message on failed pin verification
2024-07-05 09:00:20 +02:00
pwm
pwm: stm32: Always do lazy disabling
2024-08-19 05:31:56 +02:00
rapidio
…
ras
…
regulator
regulator: core: Fix modpost error "regulator_get_regmap" undefined
2024-07-05 09:00:28 +02:00
remoteproc
remoteproc: imx_rproc: Skip over memory region when node value is NULL
2024-08-19 05:32:09 +02:00
reset
reset: berlin: fix OF node leak in probe() error path
2024-11-08 16:19:04 +01:00
rpmsg
rpmsg: virtio: Free driver_override when rpmsg_remove()
2024-02-23 08:12:40 +01:00
rtc
rtc: at91sam9: fix OF node leak in probe() error path
2024-11-08 16:19:16 +01:00
s390
s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
2024-11-08 16:19:19 +01:00
sbus
…
scsi
scsi: aacraid: Rearrange order of struct aac_srb_unit
2024-11-08 16:19:13 +01:00
sfi
…
sh
…
siox
…
slimbus
slimbus: core: Remove usage of the deprecated ida_simple_xx() API
2024-04-13 12:50:06 +02:00
sn
…
soc
soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
2024-12-05 10:59:31 +01:00
soundwire
soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
2024-11-08 16:19:03 +01:00
spi
spi: bcm63xx: Fix module autoloading
2024-11-08 16:19:13 +01:00
spmi
spmi: Add a check for remove callback when removing a SPMI driver
2023-05-17 11:13:17 +02:00
ssb
ssb: Fix division by zero issue in ssb_calc_clock_rate
2024-09-04 13:13:00 +02:00
staging
staging: iio: frequency: ad9834: Validate frequency parameter value
2024-11-08 16:19:02 +01:00
target
scsi: target: Fix SELinux error when systemd-modules loads the target module
2024-05-17 11:42:40 +02:00
tc
…
tee
…
thermal
thermal: core: prevent potential string overflow
2023-11-20 10:29:17 +01:00
thunderbolt
thunderbolt: Use const qualifier for ring_interrupt_index
2023-04-05 11:15:35 +02:00
tty
vt: prevent kernel-infoleak in con_font_get()
2024-11-08 16:19:23 +01:00
uio
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
2024-09-12 11:02:54 +02:00
usb
USB: serial: option: add Quectel RG650V
2024-11-17 14:58:07 +01:00
uwb
…
vfio
vfio/platform: Disable virqfds on cleanup
2024-04-13 12:50:06 +02:00
vhost
vhost: Add smp_rmb() in vhost_vq_avail_empty()
2024-05-02 16:17:08 +02:00
video
fbdev: sisfb: Fix strbuf array overflow
2024-11-08 16:19:17 +01:00
virt
…
virtio
virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
2024-06-16 13:23:36 +02:00
visorbus
…
vlynq
…
vme
…
w1
w1: fix loop in w1_fini()
2023-08-11 11:45:11 +02:00
watchdog
watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
2024-01-25 14:33:36 -08:00
xen
xen/swiotlb: add alignment check for dma buffers
2024-11-08 16:19:06 +01:00
zorro
…
Kconfig
…
Makefile
…