Linus Torvalds 6f957724b9 Fix firmware loader uevent buffer NULL pointer dereference ... The firmware class uevent function accessed the "fw_priv->buf" buffer without the proper locking and testing for NULL. This is an old bug (looks like it goes back to 2012 and commit 1244691c73: "firmware loader: introduce firmware_buf"), but for some reason it's triggering only now in 4.2-rc1. Shuah Khan is trying to bisect what it is that causes this to trigger more easily, but in the meantime let's just fix the bug since others are hitting it too (at least Ingo reports having seen it as well). Reported-and-tested-by: Shuah Khan <shuahkh@osg.samsung.com> Acked-by: Ming Lei <ming.lei@canonical.com> Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2015-07-09 11:20:01 -07:00
..
power	Merge branches 'acpi-pnp', 'acpi-soc', 'pm-domains' and 'pm-sleep'	2015-07-07 22:48:14 +02:00
regmap	Merge remote-tracking branches 'regmap/topic/defaults', 'regmap/topic/irq' and 'regmap/topic/reg-params' into regmap-next	2015-06-17 17:40:08 +01:00
attribute_container.c	attribute_container: fix missing blank lines after declarations	2015-03-25 14:35:09 +01:00
base.h	driver-core: add asynchronous probing support for drivers	2015-05-20 00:25:24 -07:00
bus.c	driver-core: add asynchronous probing support for drivers	2015-05-20 00:25:24 -07:00
cacheinfo.c	Merge 4.1-rc7 into driver-core-next	2015-06-08 10:19:40 -07:00
class.c	drivers: base: class: Add a blank line after declarations	2015-03-25 14:36:19 +01:00
component.c	component: fix bug with legacy API	2014-07-04 18:05:05 +01:00
container.c	ACPI / hotplug / driver core: Handle containers in a special way	2013-12-29 15:25:48 +01:00
core.c	drivers/base/core.c: use strreplace()	2015-06-25 17:00:40 -07:00
cpu.c	show nohz_full cpus in sysfs	2015-05-20 00:15:09 -07:00
dd.c	base:dd - Fix for typo in comment to function driver_deferred_probe_trigger().	2015-06-01 10:15:17 +09:00
devcoredump.c	devcoredump: provide a one-way disable function	2014-11-26 19:40:12 -08:00
devres.c	devres: Improve devm_kasprintf()/kvasprintf() support	2014-09-23 23:32:50 -07:00
devtmpfs.c	VFS: assorted weird filesystems: d_inode() annotations	2015-04-15 15:06:58 -04:00
dma-coherent.c	drivers: dma-coherent: add initialization from device tree	2014-10-14 02:18:12 +02:00
dma-contiguous.c	drivers: of: add return value to of_reserved_mem_device_init()	2014-10-29 16:33:14 -07:00
dma-mapping.c	drivers: base: dma-mapping: Erase blank space after pointer	2015-03-25 14:36:19 +01:00
driver.c	driver core: add missing blank line after declaration	2015-03-25 14:36:30 +01:00
firmware_class.c	Fix firmware loader uevent buffer NULL pointer dereference	2015-07-09 11:20:01 -07:00
firmware.c	firmware: change firmware_kset to firmware_kobj	2008-01-24 20:40:23 -08:00
hypervisor.c	drivers/base: Add export.h for EXPORT_SYMBOL/THIS_MODULE as required.	2011-10-31 19:31:38 -04:00
init.c	drivers: of/base: move of_init to driver_init	2015-05-26 19:55:56 -07:00
isa.c	dma-mapping: replace all DMA_24BIT_MASK macro with DMA_BIT_MASK(24)	2009-04-07 08:31:12 -07:00
Kconfig	cma: make default CMA area size zero for x86	2014-12-10 17:41:06 -08:00
Makefile	Driver core patches for 3.19-rc1	2014-12-14 16:10:09 -08:00
map.c	drivers: base: map: Use kmalloc_array instead of kmalloc	2015-03-25 14:35:08 +01:00
memory.c	mm, hotplug: fix concurrent memory hot-add deadlock	2015-04-14 16:49:00 -07:00
module.c	driver core: module.c: Use kasprintf	2010-05-21 09:37:29 -07:00
node.c	mm: meminit: initialise a subset of struct pages if CONFIG_DEFERRED_STRUCT_PAGE_INIT is set	2015-06-30 19:44:56 -07:00
pinctrl.c	drivers: pinctrl sleep and idle states in the core	2013-06-16 11:56:52 +02:00
platform.c	Revert "base/platform: Only insert MEM and IO resources"	2015-06-10 08:38:29 -07:00
property.c	Merge branches 'acpi-video', 'device-properties', 'pm-sleep' and 'pm-cpuidle'	2015-06-26 03:30:37 +02:00
soc.c	drivers/base: use tabs where possible in code indentation	2015-03-25 14:37:35 +01:00
syscore.c	genirq: Simplify wakeup mechanism	2014-09-01 13:48:59 +02:00
topology.c	sched/topology: Rename topology_thread_cpumask() to topology_sibling_cpumask()	2015-05-27 15:22:15 +02:00
transport_class.c	drivers/base: transport_class explicitly requires EXPORT_SYMBOL	2011-10-31 19:31:15 -04:00