renegade-project/linux-next
2
0
Fork 0
mirror of https://github.com/edk2-porting/linux-next.git synced 2025-01-17 18:14:34 +08:00
Code

Keystone SOC Navigator driver non critical fixes frm Alex for 3.19

Browse Source 
- Use list_for_each_entry_safe to prevent use after free
 	- Return proper error if devm_kzalloc fails
 	- Use list_first_entry_or_null() at appropriate places
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 
 iQIcBAABAgAGBQJUZAnHAAoJEHJsHOdBp5c/J28P/At1EEax/BYP6mJN6Yq9ZowQ
 sPkWXnMgq+dFzl56TWdpHRanHj5CP3SYSFGEDhSRfrR4fMAiQXjAVY6SQhqHOaqY
 zEF4bdJc9QfmdQZjqvexwLL9IY0nlHKvCmrTDMR1VvXraOlkPYlebjJKEkhWI9b5
 QfMLlr44MADH4+mESRL9sep5BIjxGADRTFnKhEG0Ix1nF1qnyNLDDRVls/jRzhA8
 DeVJH4wZtDAFXistNRjIFxahbTKraDa5/bpwcQ7AVMVL5uSGuHOKGPs/RIWCtUBe
 9xrsM1PSGPs6v2Wp+w19fHxsYtbxB+2BnbIZu55+E68jToe5Umz1mxyvh1flcjQk
 /jsFM30QYh64MPONZj7i3rHdXwpWWpvqm9wB+AKTLhv1WgjVpgr3x9BV3kSxiLlL
 E59rC1NVKb0UVByLm23YLerEkuYUWXj92Vh9/siKYjpef73TPv8lSIpI6XyFflp0
 514+JtR0dUh/ga64OtFTvVc8BaAigNh+4XwjS+bc+kAxKufHGlQk447Ja8x6mUIB
 d1ny/vLk55OaZKNiivCZ8oXnIh3iGrSzVnlYOiFJQcrQzY75HMApeqqqS1DLI4ZS
 wvP8SJ+akiK1dvNipR8BJ3YmKRPN9VZs6/5UjJSvxNYSD+HDIU18RbGxaJRmek7V
 VUDTyiE0ijMxsmMbZJFe
 =fVvC
 -----END PGP SIGNATURE-----

Merge tag 'keystone-driver-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/ssantosh/linux-keystone into next/drivers

Pull "Keystone SOC Navigator driver non critical fixes frm Alex for 3.19" from Santosh Shilimkar:

	- Use list_for_each_entry_safe to prevent use after free
	- Return proper error if devm_kzalloc fails
	- Use list_first_entry_or_null() at appropriate places

* tag 'keystone-driver-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/ssantosh/linux-keystone:
  soc: ti: knav_qmss_queue: Use list_for_each_entry_safe to prevent use after free
  soc: ti: knav_qmss_queue: Return proper error if devm_kzalloc fails
  soc: ti: knav_qmss_queue: Fix unbalanced locking ins knav_pool_create()
  soc: ti: Use list_first_entry_or_null() at appropriate places

Signed-off-by: Arnd Bergmann <arnd@arndb.de>
This commit is contained in:
Arnd Bergmann 2014-11-20 13:15:25 +01:00
commit 27bc375a9c
2 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
drivers/soc/ti/knav_qmss.h
View File

@ -348,15 +348,15 @@ struct knav_range_info {
list_for_each_entry(region, &kdev->regions, list)
#define first_region(kdev) \
list_first_entry(&kdev->regions, \
struct knav_region, list)
list_first_entry_or_null(&kdev->regions, \
struct knav_region, list)
#define for_each_queue_range(kdev, range) \
list_for_each_entry(range, &kdev->queue_ranges, list)
#define first_queue_range(kdev) \
list_first_entry(&kdev->queue_ranges, \
struct knav_range_info, list)
list_first_entry_or_null(&kdev->queue_ranges, \
struct knav_range_info, list)
#define for_each_pool(kdev, pool) \
list_for_each_entry(pool, &kdev->pools, list)

13
drivers/soc/ti/knav_qmss_queue.c
View File

@ -785,7 +785,7 @@ void *knav_pool_create(const char *name,
dev_err(kdev->dev, "out of descs in region(%d) for pool(%s)\n",
region_id, name);
ret = -ENOMEM;
goto err;
goto err_unlock;
}
/* Region maintains a sorted (by region offset) list of pools
@ -815,15 +815,16 @@ void *knav_pool_create(const char *name,
dev_err(kdev->dev, "pool(%s) create failed: fragmented desc pool in region(%d)\n",
name, region_id);
ret = -ENOMEM;
goto err;
goto err_unlock;
}
mutex_unlock(&knav_dev_lock);
kdesc_fill_pool(pool);
return pool;
err:
err_unlock:
mutex_unlock(&knav_dev_lock);
err:
kfree(pool->name);
devm_kfree(kdev->dev, pool);
return ERR_PTR(ret);
@ -1305,14 +1306,14 @@ static void knav_free_queue_ranges(struct knav_device *kdev)
static void knav_queue_free_regions(struct knav_device *kdev)
{
struct knav_region *region;
struct knav_pool *pool;
struct knav_pool *pool, *tmp;
unsigned size;
for (;;) {
region = first_region(kdev);
if (!region)
break;
list_for_each_entry(pool, &region->pools, region_inst)
list_for_each_entry_safe(pool, tmp, &region->pools, region_inst)
knav_pool_destroy(pool);
size = region->virt_end - region->virt_start;
@ -1639,7 +1640,7 @@ static int knav_queue_init_queues(struct knav_device *kdev)
size = (1 << kdev->inst_shift) * kdev->num_queues_in_use;
kdev->instances = devm_kzalloc(kdev->dev, size, GFP_KERNEL);
if (!kdev->instances)
return -1;
return -ENOMEM;
for_each_queue_range(kdev, range) {
if (range->ops && range->ops->init_range)