linux_dsm_epyc7002/drivers/misc/mei
Tomas Winkler 34f1166afd mei: bus: need to unlink client before freeing
In case a client fails to connect in mei_cldev_enable(), the
caller won't call the mei_cldev_disable leaving the client
in a linked stated. Upon driver unload the client structure
will be freed in  mei_cl_bus_dev_release(), leaving a stale pointer
on a fail_list.  This will eventually end up in crash
during power down flow in mei_cl_set_disonnected().

RIP:  mei_cl_set_disconnected+0x5/0x260[mei]
Call trace:
mei_cl_all_disconnect+0x22/0x30
mei_reset+0x194/0x250
__synchronize_hardirq+0x43/0x50
_cond_resched+0x15/0x30
mei_me_intr_clear+0x20/0x100
mei_stop+0x76/0xb0
mei_me_shutdown+0x3f/0x80
pci_device_shutdown+0x34/0x60
kernel_restart+0x0e/0x30

Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=200455
Fixes: 'c110cdb17148 ("mei: bus: make a client pointer always available")'
Cc: <stable@vger.kernel.org> 4.10+
Tested-by: Georg Müller <georgmueller@gmx.net>
Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-09-12 09:14:24 +02:00
..
bus-fixup.c mei: bus: suppress sign-compare warnings 2018-07-16 13:29:35 +02:00
bus.c mei: bus: need to unlink client before freeing 2018-09-12 09:14:24 +02:00
client.c mei: fix use-after-free in mei_cl_write 2018-09-12 09:14:24 +02:00
client.h mei: fix ssize_t to int assignment in read and write ops. 2018-07-12 16:23:19 +02:00
debugfs.c mei: restrict dma ring support to hbm version 2.1 2018-08-02 10:18:30 +02:00
hbm.c mei: ignore not found client in the enumeration 2018-09-12 09:14:24 +02:00
hbm.h mei: me: d0i3: add d0i3 enter/exit state machine 2015-08-03 17:33:55 -07:00
hw-me-regs.h mei: me: add cannon point device ids for 4th device 2018-02-20 08:58:42 +01:00
hw-me.c mei: define dma ring buffer sizes for PCH12 HW and newer 2018-08-02 10:18:30 +02:00
hw-me.h mei: define dma ring buffer sizes for PCH12 HW and newer 2018-08-02 10:18:30 +02:00
hw-txe-regs.h mei: extract fw status registers 2014-05-03 19:21:22 -04:00
hw-txe.c mei: add support for variable length mei headers. 2018-08-02 10:18:29 +02:00
hw-txe.h mei: simplify error handling via devres function. 2017-01-31 11:08:18 +01:00
hw.h mei: restrict dma ring support to hbm version 2.1 2018-08-02 10:18:30 +02:00
init.c mei: limit the number of queued writes 2018-03-14 19:33:13 +01:00
interrupt.c mei: add support for variable length mei headers. 2018-08-02 10:18:29 +02:00
Kconfig mei: wd: drop the watchdog code from the core mei driver 2016-02-06 22:11:06 -08:00
main.c mei: fix ssize_t to int assignment in read and write ops. 2018-07-12 16:23:19 +02:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
mei_dev.h mei: restrict dma ring support to hbm version 2.1 2018-08-02 10:18:30 +02:00
mei-trace.c tracing, mei: Remove unused trace event mei_pci_cfg_write 2017-10-20 15:17:44 +02:00
mei-trace.h tracing, mei: Remove unused trace event mei_pci_cfg_write 2017-10-20 15:17:44 +02:00
pci-me.c mei: me: add cannon point device ids for 4th device 2018-02-20 08:58:42 +01:00
pci-txe.c Merge branch 'pm-core' 2017-11-13 01:41:26 +01:00