1. 21 7月, 2020 2 次提交
  2. 16 7月, 2020 1 次提交
  3. 07 7月, 2020 1 次提交
  4. 01 7月, 2020 3 次提交
  5. 24 6月, 2020 1 次提交
  6. 03 6月, 2020 1 次提交
  7. 27 5月, 2020 1 次提交
  8. 22 5月, 2020 1 次提交
  9. 15 5月, 2020 3 次提交
  10. 18 4月, 2020 1 次提交
  11. 31 3月, 2020 1 次提交
    • Y
      qed: Fix use after free in qed_chain_free · 8063f761
      Yuval Basson 提交于
      The qed_chain data structure was modified in
      commit 1a4a6975 ("qed: Chain support for external PBL") to support
      receiving an external pbl (due to iWARP FW requirements).
      The pages pointed to by the pbl are allocated in qed_chain_alloc
      and their virtual address are stored in an virtual addresses array to
      enable accessing and freeing the data. The physical addresses however
      weren't stored and were accessed directly from the external-pbl
      during free.
      
      Destroy-qp flow, leads to freeing the external pbl before the chain is
      freed, when the chain is freed it tries accessing the already freed
      external pbl, leading to a use-after-free. Therefore we need to store
      the physical addresses in additional to the virtual addresses in a
      new data structure.
      
      Fixes: 1a4a6975 ("qed: Chain support for external PBL")
      Signed-off-by: NMichal Kalderon <mkalderon@marvell.com>
      Signed-off-by: NYuval Bason <ybason@marvell.com>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      8063f761
  12. 27 1月, 2020 7 次提交
  13. 11 9月, 2019 1 次提交
  14. 01 9月, 2019 2 次提交
  15. 16 8月, 2019 1 次提交
  16. 09 8月, 2019 1 次提交
  17. 26 7月, 2019 1 次提交
  18. 05 6月, 2019 1 次提交
  19. 27 5月, 2019 2 次提交
  20. 08 4月, 2019 1 次提交
    • W
      drivers: Remove explicit invocations of mmiowb() · fb24ea52
      Will Deacon 提交于
      mmiowb() is now implied by spin_unlock() on architectures that require
      it, so there is no reason to call it from driver code. This patch was
      generated using coccinelle:
      
      	@mmiowb@
      	@@
      	- mmiowb();
      
      and invoked as:
      
      $ for d in drivers include/linux/qed sound; do \
      spatch --include-headers --sp-file mmiowb.cocci --dir $d --in-place; done
      
      NOTE: mmiowb() has only ever guaranteed ordering in conjunction with
      spin_unlock(). However, pairing each mmiowb() removal in this patch with
      the corresponding call to spin_unlock() is not at all trivial, so there
      is a small chance that this change may regress any drivers incorrectly
      relying on mmiowb() to order MMIO writes between CPUs using lock-free
      synchronisation. If you've ended up bisecting to this commit, you can
      reintroduce the mmiowb() calls using wmb() instead, which should restore
      the old behaviour on all architectures other than some esoteric ia64
      systems.
      Acked-by: NLinus Torvalds <torvalds@linux-foundation.org>
      Signed-off-by: NWill Deacon <will.deacon@arm.com>
      fb24ea52
  21. 09 2月, 2019 1 次提交
  22. 29 1月, 2019 2 次提交
  23. 26 1月, 2019 1 次提交
  24. 23 1月, 2019 2 次提交
  25. 18 1月, 2019 1 次提交