Bingbu Cao 33e3c349b2 media: staging/intel-ipu3: Implement lock for stream on/off operations ... Currently concurrent stream off operations on ImgU nodes are not synchronized, leading to use-after-free bugs (as reported by KASAN). [ 250.090724] BUG: KASAN: use-after-free in ipu3_dmamap_free+0xc5/0x116 [ipu3_imgu] [ 250.090726] Read of size 8 at addr ffff888127b29bc0 by task yavta/18836 [ 250.090731] Hardware name: HP Soraka/Soraka, BIOS Google_Soraka.10431.17.0 03/22/2018 [ 250.090732] Call Trace: [ 250.090735] dump_stack+0x6a/0xb1 [ 250.090739] print_address_description+0x8e/0x279 [ 250.090743] ? ipu3_dmamap_free+0xc5/0x116 [ipu3_imgu] [ 250.090746] kasan_report+0x260/0x28a [ 250.090750] ipu3_dmamap_free+0xc5/0x116 [ipu3_imgu] [ 250.090754] ipu3_css_pool_cleanup+0x24/0x37 [ipu3_imgu] [ 250.090759] ipu3_css_pipeline_cleanup+0x61/0xb9 [ipu3_imgu] [ 250.090763] ipu3_css_stop_streaming+0x1f2/0x321 [ipu3_imgu] [ 250.090768] imgu_s_stream+0x94/0x443 [ipu3_imgu] [ 250.090772] ? ipu3_vb2_buf_queue+0x280/0x280 [ipu3_imgu] [ 250.090775] ? vb2_dma_sg_unmap_dmabuf+0x16/0x6f [videobuf2_dma_sg] [ 250.090778] ? vb2_buffer_in_use+0x36/0x58 [videobuf2_common] [ 250.090782] ipu3_vb2_stop_streaming+0xf9/0x135 [ipu3_imgu] Implemented a lock to synchronize imgu stream on / off operations and the modification of streaming flag (in struct imgu_device), to prevent these issues. Reported-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Suggested-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Rajmohan Mani <rajmohan.mani@intel.com> Signed-off-by: Bingbu Cao <bingbu.cao@intel.com> Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>		2020-04-14 12:17:43 +02:00
..
accessibility
acpi	More ACPI updates for 5.7-rc1	2020-04-10 09:52:15 -07:00
amba
android
ata	ahci: Add Intel Comet Lake PCH RAID PCI ID	2020-04-09 09:31:38 -06:00
atm
auxdisplay
base	mm/memory_hotplug: allow to specify a default online_type	2020-04-07 10:43:41 -07:00
bcma
block	xen: branch for v5.7-rc1b	2020-04-10 17:20:06 -07:00
bluetooth
bus	ARM: driver updates	2020-04-03 15:05:35 -07:00
cdrom
char	Merge branch 'akpm' (patches from Andrew)	2020-04-10 17:57:48 -07:00
clk	There's not much to see in the core framework this time around. Instead the	2020-04-05 10:43:32 -07:00
clocksource	clocksource/drivers/timer-vf-pit: Add missing parenthesis	2020-04-05 09:24:58 +02:00
connector
counter
cpufreq	Additional power management updates for 5.7-rc1	2020-04-06 10:14:39 -07:00
cpuidle	Merge branch 'pm-cpuidle'	2020-04-10 11:32:22 +02:00
crypto	Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2020-04-08 21:35:29 -07:00
dax	dax: Move mandatory ->zero_page_range() check in alloc_dax()	2020-04-02 19:15:03 -07:00
dca
devfreq
dio
dma	drivers/dma/tegra20-apb-dma.c: fix platform_get_irq.cocci warnings	2020-04-10 15:36:22 -07:00
dma-buf	A bunch of fixes to avoid null pointer dereference in fbcon, fix a return	2020-04-08 09:14:34 +10:00
edac
eisa
extcon	Char/Misc driver patches for 5.7-rc1	2020-04-03 13:22:40 -07:00
firewire
firmware	sound fixes for 5.7-rc1	2020-04-10 12:27:06 -07:00
fpga
fsi
gnss
gpio	This is the bulk of GPIO development for the v5.7 kernel cycle.	2020-04-04 10:27:00 -07:00
gpu	Kbuild updates for v5.7 (2nd)	2020-04-11 09:46:12 -07:00
greybus
hid	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid	2020-04-01 15:18:42 -07:00
hsi
hv	hv_balloon: don't check for memhp_auto_online manually	2020-04-07 10:43:40 -07:00
hwmon	change email address for Pali Rohár	2020-04-10 15:36:22 -07:00
hwspinlock
hwtracing
i2c	Merge branch 'i2c/for-5.7' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux	2020-04-02 15:54:13 -07:00
i3c
ide	drivers/ide: Fix build regression.	2020-04-04 18:07:59 -07:00
idle
iio	chrome platform changes for 5.7	2020-04-08 21:25:49 -07:00
infiniband	RDMA 5.7 pull request	2020-04-01 18:18:18 -07:00
input	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input	2020-04-07 20:20:12 -07:00
interconnect
iommu
ipack
irqchip	Two reverts addressing regressions of the Xilinx interrupt controller	2020-04-05 11:57:12 -07:00
isdn
leds	leds: core: Fix warning message when init_data	2020-04-06 23:12:08 +02:00
lightnvm
macintosh	Char/Misc driver patches for 5.7-rc1	2020-04-03 13:22:40 -07:00
mailbox
mcb
md	libnvdimm for 5.7	2020-04-08 21:03:40 -07:00
media	media: vimc: fix kernel-doc markups	2020-04-14 12:14:43 +02:00
memory	ARM: driver updates	2020-04-03 15:05:35 -07:00
memstick
message
mfd
misc	virtio: fixes, vdpa	2020-04-08 10:51:53 -07:00
mmc
most
mtd	This pull request contains fixes for UBI and UBIFS:	2020-04-07 12:40:56 -07:00
mux
net	virtio: fixes, vdpa	2020-04-08 10:51:53 -07:00
nfc
ntb	pci-v5.7-changes	2020-04-03 14:25:02 -07:00
nubus
nvdimm	libnvdimm for 5.7	2020-04-08 21:03:40 -07:00
nvme	block-5.7-2020-04-10	2020-04-10 10:06:54 -07:00
nvmem
of	Devicetree updates for v5.7:	2020-04-02 17:32:52 -07:00
opp
oprofile
parisc	parisc: Replace setup_irq() by request_irq()	2020-04-05 22:05:23 +02:00
parport
pci	IOMMU Updates for Linux v5.7	2020-04-08 11:00:00 -07:00
pcmcia
perf
phy	pci-v5.7-changes	2020-04-03 14:25:02 -07:00
pinctrl	This is the bulk of GPIO development for the v5.7 kernel cycle.	2020-04-04 10:27:00 -07:00
platform	change email address for Pali Rohár	2020-04-10 15:36:22 -07:00
pnp
power	change email address for Pali Rohár	2020-04-10 15:36:22 -07:00
powercap
pps
ps3	powerpc/ps3: Remove an unneeded NULL check	2020-04-03 00:09:59 +11:00
ptp
pwm	pwm: pca9685: Fix PWM/GPIO inter-operation	2020-04-03 21:41:42 +02:00
rapidio
ras
regulator
remoteproc	remoteproc/omap: Fix set_load call in omap_rproc_request_timer	2020-04-03 10:47:21 -07:00
reset
rpmsg
rtc	- New Drivers	2020-04-07 19:48:52 -07:00
s390	SCSI misc on 20200410	2020-04-10 12:21:11 -07:00
sbus
scsi	SCSI misc on 20200410	2020-04-10 12:21:11 -07:00
sfi
sh
siox
slimbus
soc	RISC-V Patches for the 5.7 Merge Window, Part 1	2020-04-09 10:51:30 -07:00
soundwire	Char/Misc driver patches for 5.7-rc1	2020-04-03 13:22:40 -07:00
spi	sound updates for 5.7-rc1	2020-04-02 15:50:04 -07:00
spmi
ssb
staging	media: staging/intel-ipu3: Implement lock for stream on/off operations	2020-04-14 12:17:43 +02:00
target	SCSI misc on 20200410	2020-04-10 12:21:11 -07:00
tc
tee	ARM: driver updates	2020-04-03 15:05:35 -07:00
thermal	- Convert tsens configuration DT binding to yaml (Rajeshwari)	2020-04-07 20:00:16 -07:00
thunderbolt
tty	powerpc updates for 5.7	2020-04-05 11:12:59 -07:00
uio
usb	SCSI misc on 20200402	2020-04-02 17:03:53 -07:00
vdpa	vdpa: move to drivers/vdpa	2020-04-02 10:41:40 -04:00
vfio	vfio: Ignore -ENODEV when getting MSI cookie	2020-04-01 13:51:51 -06:00
vhost	vhost: introduce vDPA-based backend	2020-04-02 10:41:40 -04:00
video	drm fixes for 5.7-rc1	2020-04-07 20:24:34 -07:00
virt
virtio	virtio: fixes, vdpa	2020-04-08 10:51:53 -07:00
visorbus
vlynq
vme
w1
watchdog
xen	xen: branch for v5.7-rc1b	2020-04-10 17:20:06 -07:00
zorro	SPDX patches for 5.7-rc1.	2020-04-03 13:12:26 -07:00
Kconfig	virtio: fixes, vdpa	2020-04-08 10:51:53 -07:00
Makefile	virtio: fixes, vdpa	2020-04-08 10:51:53 -07:00