1. 06 6月, 2018 1 次提交
  2. 04 6月, 2018 2 次提交
    • S
      of: platform: stop accessing invalid dev in of_platform_device_destroy · 522811e9
      Srinivas Kandagatla 提交于
      Immediately after the platform_device_unregister() the device will be
      cleaned up. Accessing the freed pointer immediately after that will
      crash the system.
      
      Found this bug when kernel is built with CONFIG_PAGE_POISONING and testing
      loading/unloading audio drivers in a loop on Qcom platforms.
      
      Fix this by moving of_node_clear_flag() just before the unregister calls.
      
      Below is the crash trace:
      
      Unable to handle kernel paging request at virtual address 6b6b6b6b6b6c03
      Mem abort info:
        ESR = 0x96000021
        Exception class = DABT (current EL), IL = 32 bits
        SET = 0, FnV = 0
        EA = 0, S1PTW = 0
      Data abort info:
        ISV = 0, ISS = 0x00000021
        CM = 0, WnR = 0
      [006b6b6b6b6b6c03] address between user and kernel address ranges
      Internal error: Oops: 96000021 [#1] PREEMPT SMP
      Modules linked in:
      CPU: 2 PID: 1784 Comm: sh Tainted: G        W         4.17.0-rc7-02230-ge3a63a7ef641-dirty #204
      Hardware name: Qualcomm Technologies, Inc. APQ 8016 SBC (DT)
      pstate: 80000005 (Nzcv daif -PAN -UAO)
      pc : clear_bit+0x18/0x2c
      lr : of_platform_device_destroy+0x64/0xb8
      sp : ffff00000c9c3930
      x29: ffff00000c9c3930 x28: ffff80003d39b200
      x27: ffff000008bb1000 x26: 0000000000000040
      x25: 0000000000000124 x24: ffff80003a9a3080
      x23: 0000000000000060 x22: ffff00000939f518
      x21: ffff80003aa79e98 x20: ffff80003aa3dae0
      x19: ffff80003aa3c890 x18: ffff800009feb794
      x17: 0000000000000000 x16: 0000000000000000
      x15: ffff800009feb790 x14: 0000000000000000
      x13: ffff80003a058778 x12: ffff80003a058728
      x11: ffff80003a058750 x10: 0000000000000000
      x9 : 0000000000000006 x8 : ffff80003a825988
      x7 : bbbbbbbbbbbbbbbb x6 : 0000000000000001
      x5 : 0000000000000000 x4 : 0000000000000001
      x3 : 0000000000000008 x2 : 0000000000000001
      x1 : 6b6b6b6b6b6b6c03 x0 : 0000000000000000
      Process sh (pid: 1784, stack limit = 0x        (ptrval))
      Call trace:
       clear_bit+0x18/0x2c
       q6afe_remove+0x20/0x38
       apr_device_remove+0x30/0x70
       device_release_driver_internal+0x170/0x208
       device_release_driver+0x14/0x20
       bus_remove_device+0xcc/0x150
       device_del+0x10c/0x310
       device_unregister+0x1c/0x70
       apr_remove_device+0xc/0x18
       device_for_each_child+0x50/0x80
       apr_remove+0x18/0x20
       rpmsg_dev_remove+0x38/0x68
       device_release_driver_internal+0x170/0x208
       device_release_driver+0x14/0x20
       bus_remove_device+0xcc/0x150
       device_del+0x10c/0x310
       device_unregister+0x1c/0x70
       qcom_smd_remove_device+0xc/0x18
       device_for_each_child+0x50/0x80
       qcom_smd_unregister_edge+0x3c/0x70
       smd_subdev_remove+0x18/0x28
       rproc_stop+0x48/0xd8
       rproc_shutdown+0x60/0xe8
       state_store+0xbc/0xf8
       dev_attr_store+0x18/0x28
       sysfs_kf_write+0x3c/0x50
       kernfs_fop_write+0x118/0x1e0
       __vfs_write+0x18/0x110
       vfs_write+0xa4/0x1a8
       ksys_write+0x48/0xb0
       sys_write+0xc/0x18
       el0_svc_naked+0x30/0x34
      Code: d2800022 8b400c21 f9800031 9ac32043 (c85f7c22)
      ---[ end trace 32020935775616a2 ]---
      Signed-off-by: NSrinivas Kandagatla <srinivas.kandagatla@linaro.org>
      Cc: stable@vger.kernel.org
      Signed-off-by: NRob Herring <robh@kernel.org>
      522811e9
    • Y
      dt-bindings: net: ravb: Add support for r8a77990 SoC · 7824b54d
      Yoshihiro Shimoda 提交于
      Add documentation for r8a77990 compatible string to renesas ravb device
      tree bindings documentation.
      Signed-off-by: NYoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
      Acked-by: NSergei Shtylyov <sergei.shtylyov@cogentembedded.com>
      Reviewed-by: NSimon Horman <horms+renesas@verge.net.au>
      Signed-off-by: NRob Herring <robh@kernel.org>
      7824b54d
  3. 01 6月, 2018 2 次提交
  4. 24 5月, 2018 2 次提交
  5. 23 5月, 2018 1 次提交
  6. 15 5月, 2018 4 次提交
  7. 10 5月, 2018 1 次提交
    • F
      MAINTAINERS: add keyword for devicetree overlay notifiers · 2ff0e41a
      Frank Rowand 提交于
      Devicetree overlay notifiers have a chance to potentially get
      pointers into the overlay unflattened devicetree and overlay FDT.
      The only protection against these pointers being accessed after
      the underlying data has been released by kfree() is by source
      code review of patches.  Add a keyword line to the devicetree
      overlay maintainers entry to try to catch overlay notifier
      related patches.
      
      The keyword line is added to the devicetree overlay entry instead
      of the devicetree entry so that not all maintainers will receive
      the additional review traffic.  Add Frank Rowand (already a
      maintainer in the devicetree entry) so that he will receive
      the additional review traffic.
      Signed-off-by: NFrank Rowand <frank.rowand@sony.com>
      Signed-off-by: NRob Herring <robh@kernel.org>
      2ff0e41a
  8. 08 5月, 2018 2 次提交
  9. 02 5月, 2018 2 次提交
  10. 01 5月, 2018 2 次提交
  11. 28 4月, 2018 5 次提交
  12. 27 4月, 2018 1 次提交
  13. 24 4月, 2018 4 次提交
  14. 18 4月, 2018 2 次提交
    • R
      dt-bindings: more status property removal from examples · 304a39b4
      Rob Herring 提交于
      Whack-a-mole some more occurrences of status in examples.
      Acked-by: NVinod Koul <vinod.koul@intel.com>
      Cc: Mark Rutland <mark.rutland@arm.com>
      Cc: Ralf Baechle <ralf@linux-mips.org>
      Cc: James Hogan <jhogan@kernel.org>
      Cc: Ulf Hansson <ulf.hansson@linaro.org>
      Cc: David Woodhouse <dwmw2@infradead.org>
      Cc: Brian Norris <computersforpeace@gmail.com>
      Cc: Boris Brezillon <boris.brezillon@bootlin.com>
      Cc: Marek Vasut <marek.vasut@gmail.com>
      Cc: Richard Weinberger <richard@nod.at>
      Cc: Matthias Brugger <matthias.bgg@gmail.com>
      Cc: Tanmay Inamdar <tinamdar@apm.com>
      Cc: Bjorn Helgaas <bhelgaas@google.com>
      Cc: Rodolfo Giometti <giometti@enneenne.com>
      Signed-off-by: NRob Herring <robh@kernel.org>
      304a39b4
    • R
      of/numa: drop export of of_node_to_nid · 9cf7c9cb
      Rob Herring 提交于
      The "generic" implementation of of_node_to_nid is only used by
      arm64 and only in built-in code, so remove its export. Any
      device with a struct device should be able to use dev_to_node()
      instead. Also, exporting of_node_to_nid doesn't actually work if
      we build a module on an arch that doesn't select OF_NUMA nor provide its
      own of_node_to_nid implementation.
      
      Cc: Frank Rowand <frowand.list@gmail.com>
      Signed-off-by: NRob Herring <robh@kernel.org>
      9cf7c9cb
  15. 16 4月, 2018 9 次提交
反馈
建议
客服 返回
顶部