android_kernel_oneplus_msm8998/drivers
Rajesh Kemisetti 8774e7b998 msm: kgsl: Add missing check for snapshot IB dump
During ringbuffer parsing, same IB can exist multiple times
but size validation happens only for the first time.
This leads to out of bound access if the subsequent sizes are
greater than the allocated size.

Add a check to make sure that requested size is within the
allocated range.

Change-Id: Ie5d3c02c1669de2e6188821399e985f0991aa57c
Signed-off-by: Rajesh Kemisetti <rajeshk@codeaurora.org>
2019-08-30 09:21:10 +02:00
..
accessibility printk: move braille console support into separate braille.[ch] files 2013-07-31 14:41:03 -07:00
acpi ACPI / PM: save NVS memory for ASUS 1025C laptop 2018-08-22 07:48:37 +02:00
amba ARM: amba: Don't read past the end of sysfs "driver_override" buffer 2018-05-02 07:53:42 -07:00
android binder: fix race between munmap() and direct reclaim 2019-03-30 07:59:30 +01:00
ata libata: Fix command retry decision 2018-08-06 16:24:36 +02:00
atm atm: zatm: Fix potential Spectre v1 2018-07-22 14:25:52 +02:00
auxdisplay auxdisplay: ks0108: initialize local parport variable 2015-08-14 17:27:17 -07:00
base cpuidle: don't disable cpuidle when entering suspend 2018-12-26 08:21:03 +01:00
bcma bcma: use (get|put)_device when probing/removing device driver 2017-03-12 06:37:30 +01:00
bif
block Merge android-4.4.153 (5e24b4e) into msm-4.4 2018-08-28 17:28:39 +05:30
bluetooth Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
bus bus: brcmstb_gisb: correct support for 64-bit address output 2018-04-13 19:50:05 +02:00
cdrom cdrom: do not call check_disk_change() inside cdrom_open() 2018-05-30 07:49:13 +02:00
char Merge tag 'LA.UM.7.4.r1-05400-8x98.0' into lineage-16.0 2019-08-10 14:13:49 +02:00
clk clk: qcom: mdss: avoid release of the dynamic fps PLL code memory 2018-12-26 07:58:27 +01:00
clocksource Merge android-4.4.135 (c9d74f2) into msm-4.4 2018-06-27 14:42:55 +05:30
connector connector: bump skb->users before callback invocation 2016-01-04 21:46:45 -05:00
cpufreq cpufreq: deoneplusify and remove PM QOS changes 2018-12-30 10:12:25 +01:00
cpuidle Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
crypto Merge tag 'LA.UM.7.4.r1-05300-8x98.0' into lineage-16.0 2019-06-16 08:15:21 +02:00
dca dca: convert to idr_alloc() 2013-02-27 19:10:15 -08:00
devfreq Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
dio
dma Merge android-4.4.153 (5e24b4e) into msm-4.4 2018-08-28 17:28:39 +05:30
dma-buf CHROMIUM: android: fix warning when releasing active sync point 2016-02-16 13:53:25 -08:00
edac Merge android-4.4.128 (89904cc) into msm-4.4 2018-04-20 13:05:36 +05:30
eisa Revert "EISA: Initialize device before its resources" 2014-01-17 14:57:29 -07:00
esoc esoc: Use standard reset time for mdm9x55 atomic reset 2018-04-17 21:47:45 -07:00
extcon Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
firewire firewire-ohci: work around oversized DMA reads on JMicron controllers 2018-05-30 07:48:52 +02:00
firmware Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
fmc Merge 3.14-rc5 into char-misc-next 2014-03-02 19:53:09 -08:00
fpga fpga manager: Fix firmware resource leak on error 2015-11-24 15:25:46 -08:00
gpio soc: qcom: Remove smp2p test support 2018-12-26 07:58:27 +01:00
gpu msm: kgsl: Add missing check for snapshot IB dump 2019-08-30 09:21:10 +02:00
hid Merge android-4.4.153 (5e24b4e) into msm-4.4 2018-08-28 17:28:39 +05:30
hsi HSI: ssi_protocol: double free in ssip_pn_xmit() 2018-03-24 10:58:42 +01:00
hv Drivers: hv: vmbus: fix build warning 2018-02-25 11:03:46 +01:00
hwmon platform: msm: resolve NULL pointer dereference issue 2018-08-16 11:45:37 +08:00
hwspinlock Merge remote-tracking branch 'lsk-44/linux-linaro-lsk-v4.4' into 44rc2 2016-03-23 20:51:00 -07:00
hwtracing coresight: fix handling of ETM management register access via sysfs 2018-10-29 19:36:46 -07:00
i2c i2c-msm-v2: Handle Null pointer de-reference 2018-12-26 07:54:00 +01:00
ide cdrom: do not call check_disk_change() inside cdrom_open() 2018-05-30 07:49:13 +02:00
idle idle: i7300: add PCI dependency 2018-02-25 11:03:51 +01:00
iio Merge android-4.4.139 (7ba5557) into msm-4.4 2018-07-03 12:24:56 -07:00
infiniband IB/ocrdma: fix out of bounds access to local buffer 2018-08-15 17:42:06 +02:00
input tri-state-key: send proper input when updating keycodes from userspace 2019-03-13 20:23:25 +01:00
iommu Merge tag 'LA.UM.7.4.r1-05300-8x98.0' into lineage-16.0 2019-06-16 08:15:21 +02:00
ipack ipoctal: clear break interrupt as soon as it occurs 2014-09-23 23:26:42 -07:00
irqchip Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
isdn isdn: Disable IIOCDBGVAR 2018-08-22 07:48:38 +02:00
leds leds-qpnp: revert changes made by op 2018-12-26 08:21:02 +01:00
lguest Merge branch 'x86-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip 2015-06-22 17:59:09 -07:00
lightnvm lightnvm: put bio before return 2016-09-24 10:07:35 +02:00
macintosh
mailbox mailbox: handle empty message in tx_tick 2017-08-06 19:19:41 -07:00
mcb mcb: Fixed bar number assignment for the gdd 2016-06-01 12:15:53 -07:00
md Merge android-4.4.153 (5e24b4e) into msm-4.4 2018-08-28 17:28:39 +05:30
media Revert "msm: camera: isp: Fix frame drop pattern" 2019-08-10 14:20:12 +02:00
memory memory: tegra: Apply interrupts mask per SoC 2018-08-06 16:24:38 +02:00
memstick memstick: rtsx_usb_ms: Manage runtime PM when accessing the device 2016-10-28 03:01:35 -04:00
message scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() 2018-05-30 07:48:58 +02:00
mfd Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
misc Merge tag 'LA.UM.7.4.r1-05300-8x98.0' into lineage-16.0 2019-06-16 08:15:21 +02:00
mmc Revert "Revert "mmc: core: Update SD card removal logic based on cd gpio state"" 2018-08-09 19:11:30 +05:30
mtd Merge android-4.4.146 (13962260) into msm-4.4 2018-08-07 15:36:56 +05:30
net Merge tag 'LA.UM.7.4.r1-04700-8x98.0' into auto 2019-03-10 16:59:28 +01:00
nfc Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
ntb ntb_transport: Fix bug with max_mw_size parameter 2018-05-30 07:48:55 +02:00
nubus nubus: Remove superfluous interrupt disable/restore 2014-10-27 11:03:19 +01:00
nvdimm linvdimm, pmem: Preserve read-only setting for pmem devices 2018-07-03 11:21:31 +02:00
nvme nvme-pci: initialize queue memory before interrupts 2018-07-11 16:03:47 +02:00
nvmem nvmem: imx-ocotp: Fix wrong register size 2017-08-06 19:19:46 -07:00
of Increase MAX_RESERVED_REGIONS 2019-01-05 10:01:15 +01:00
oneplus drivers: Allow disabling OEM debug support 2018-12-26 08:21:02 +01:00
oprofile Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2015-04-26 17:22:07 -07:00
param_read_write Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
parisc parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode 2018-05-30 07:49:10 +02:00
parport parport_pc: Add support for WCH CH382L PCI-E single parallel port card. 2018-04-08 11:52:00 +02:00
pci Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
pcmcia pcmcia: db1xxx_ss: fix last irq_to_gpio user 2016-04-20 15:42:09 +09:00
perf Merge android-4.4.127 (d6bbe8b) into msm-4.4 2018-04-20 12:27:57 +05:30
phy Merge android-4.4.113 (ef588ef) into msm-4.4 2018-01-24 18:27:37 +05:30
pinctrl cpufreq: deoneplusify and remove PM QOS changes 2018-12-30 10:12:25 +01:00
platform Merge tag 'LA.UM.7.4.r1-05400-8x98.0' into lineage-16.0 2019-08-10 14:13:49 +02:00
pnp PNP: Add Broadwell to Intel MCH size workaround 2016-08-16 09:30:48 +02:00
power smb: enable otg feature on driver init and based on dash status 2018-12-27 14:28:05 +01:00
powercap PowerCap: Fix an error code in powercap_register_zone() 2018-04-13 19:50:05 +02:00
pps pps-gpio: Add new property to use system time timestamp for PPS GPIO 2017-10-23 10:36:47 -07:00
ps3 drivers/ps3: Fix ps3-vuart null dereference 2015-09-29 23:00:58 +10:00
ptp ptp: fix missing break in switch 2018-07-25 10:18:17 +02:00
pwm pwm: qpnp: Fix qcom HW known issue 2018-12-26 08:21:02 +01:00
rapidio
ras x86/ras: Move AMD MCE injector to arch/x86/ras/ 2015-08-13 10:12:54 +02:00
regulator Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
remoteproc remoteproc: Fix potential race condition in rproc_add 2016-08-20 18:09:20 +02:00
reset reset: ath79: Fix missing spin_lock_init 2015-09-01 14:48:40 +02:00
rpmsg virtio_rpmsg: set DRIVER_OK before using device 2015-03-13 15:55:42 +10:30
rtc Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
s390 scsi: zfcp: fix missing REC trigger trace on enqueue without ERP thread 2018-07-03 11:21:31 +02:00
sbus drivers/sbus/char/envctrl.c: ignore orderly_poweroff return value 2015-04-15 16:35:23 -07:00
scsi Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
sensors soc: qcom: pil-loaders: move pil loading of ADSP, SLPI & CDSP to workqueue 2017-02-27 11:46:00 -08:00
sfi SFI: fix compiler warnings 2014-12-03 18:49:20 -05:00
sh drivers: sh: Restore legacy clock domain on SuperH platforms 2016-03-09 15:34:49 -08:00
slimbus slimbus: Avoid uninitialized variable access 2018-03-20 19:25:09 +05:30
sn
soc Merge tag 'LA.UM.7.4.r1-05400-8x98.0' into lineage-16.0 2019-08-10 14:13:49 +02:00
soundwire soc: swr-wcd: Apply div2 setting on slave side before bank switch 2018-12-05 23:30:07 -08:00
spi Merge android-4.4.139 (7ba5557) into msm-4.4 2018-07-03 12:24:56 -07:00
spmi Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
ssb ssb: mark ssb_bus_register as __maybe_unused 2018-02-25 11:03:44 +01:00
staging Update wifi stack from LA.UM.7.4.r1-05400-8x98.0 2019-07-20 07:14:53 +02:00
switch
target tcm_fileio: Prevent information leak for short reads 2018-03-24 10:58:45 +01:00
tc
tee BACKPORT: tee: shm: Potential NULL dereference calling tee_shm_register() 2018-02-21 15:40:49 +00:00
thermal Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
thunderbolt thunderbolt: Resume control channel after hibernation image is created 2018-04-24 09:32:07 +02:00
tty Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
uio uio: msm_sharedmem: add guard page around shared memory 2018-08-09 04:35:22 -07:00
usb usb: dwc3-msm: adapt enum otg_state to drd_state 2019-08-10 14:29:01 +02:00
uwb uwb: ensure that endpoint is interrupt 2017-10-12 11:27:35 +02:00
vfio vfio/pci: Virtualize Maximum Read Request Size 2018-04-24 09:32:09 +02:00
vhost vhost_net: validate sock before trying to put its fd 2018-07-22 14:25:53 +02:00
video Merge tag 'LA.UM.7.4.r1-05400-8x98.0' into lineage-16.0 2019-08-10 14:13:49 +02:00
virt drivers: clean-up prom.h implicit includes 2013-10-09 20:04:04 -05:00
virtio Merge android-4.4.146 (13962260) into msm-4.4 2018-08-07 15:36:56 +05:30
vlynq drivers/vlynq/vlynq.c: fix another resource size off by 1 error 2014-01-23 16:36:55 -08:00
vme vme: Fix wrong pointer utilization in ca91cx42_slave_get 2017-01-19 20:17:21 +01:00
w1 This is the 4.4.139 stable release 2018-07-03 18:23:34 +02:00
watchdog watchdog: f71808e_wdt: Fix magic close handling 2018-05-30 07:49:03 +02:00
xen xen: Remove unnecessary BUG_ON from __unbind_from_irq() 2018-07-03 11:21:34 +02:00
zorro zorro: Set up z->dev.dma_mask for the DMA API 2018-05-30 07:49:11 +02:00
Kconfig Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00
Makefile Synchronize codes for OnePlus5 & 5T OxygenOS 9.0.0 2018-12-26 11:02:39 +08:00