Revision 5d9b70f7d52eb14bb37861c663bae44de9521c35 authored by Mathias Nyman on 08 December 2017, 16:10:05 UTC, committed by Greg Kroah-Hartman on 08 December 2017, 17:26:34 UTC
Avoid null pointer dereference if some function is walking through the devs array accessing members of a new virt_dev that is mid allocation. Add the virt_dev to xhci->devs[i] _after_ the virt_device and all its members are properly allocated. issue found by KASAN: null-ptr-deref in xhci_find_slot_id_by_port "Quick analysis suggests that xhci_alloc_virt_device() is not mutex protected. If so, there is a time frame where xhci->devs[slot_id] is set but not fully initialized. Specifically, xhci->devs[i]->udev can be NULL." Cc: stable <stable@vger.kernel.org> Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
1 parent be6123d
| File | Mode | Size |
|---|---|---|
| partitions | ||
| Kconfig | -rw-r--r-- | 6.2 KB |
| Kconfig.iosched | -rw-r--r-- | 2.7 KB |
| Makefile | -rw-r--r-- | 1.5 KB |
| badblocks.c | -rw-r--r-- | 14.5 KB |
| bfq-cgroup.c | -rw-r--r-- | 33.6 KB |
| bfq-iosched.c | -rw-r--r-- | 170.4 KB |
| bfq-iosched.h | -rw-r--r-- | 31.4 KB |
| bfq-wf2q.c | -rw-r--r-- | 52.0 KB |
| bio-integrity.c | -rw-r--r-- | 13.8 KB |
| bio.c | -rw-r--r-- | 49.5 KB |
| blk-cgroup.c | -rw-r--r-- | 37.8 KB |
| blk-core.c | -rw-r--r-- | 101.1 KB |
| blk-exec.c | -rw-r--r-- | 2.9 KB |
| blk-flush.c | -rw-r--r-- | 17.0 KB |
| blk-integrity.c | -rw-r--r-- | 12.1 KB |
| blk-ioc.c | -rw-r--r-- | 11.0 KB |
| blk-lib.c | -rw-r--r-- | 10.6 KB |
| blk-map.c | -rw-r--r-- | 5.8 KB |
| blk-merge.c | -rw-r--r-- | 19.7 KB |
| blk-mq-cpumap.c | -rw-r--r-- | 1.7 KB |
| blk-mq-debugfs.c | -rw-r--r-- | 23.5 KB |
| blk-mq-debugfs.h | -rw-r--r-- | 2.1 KB |
| blk-mq-pci.c | -rw-r--r-- | 1.6 KB |
| blk-mq-rdma.c | -rw-r--r-- | 1.7 KB |
| blk-mq-sched.c | -rw-r--r-- | 15.9 KB |
| blk-mq-sched.h | -rw-r--r-- | 2.8 KB |
| blk-mq-sysfs.c | -rw-r--r-- | 8.2 KB |
| blk-mq-tag.c | -rw-r--r-- | 11.3 KB |
| blk-mq-tag.h | -rw-r--r-- | 2.3 KB |
| blk-mq-virtio.c | -rw-r--r-- | 1.7 KB |
| blk-mq.c | -rw-r--r-- | 72.3 KB |
| blk-mq.h | -rw-r--r-- | 5.2 KB |
| blk-settings.c | -rw-r--r-- | 28.7 KB |
| blk-softirq.c | -rw-r--r-- | 4.3 KB |
| blk-stat.c | -rw-r--r-- | 4.8 KB |
| blk-stat.h | -rw-r--r-- | 5.5 KB |
| blk-sysfs.c | -rw-r--r-- | 23.4 KB |
| blk-tag.c | -rw-r--r-- | 10.0 KB |
| blk-throttle.c | -rw-r--r-- | 67.8 KB |
| blk-timeout.c | -rw-r--r-- | 5.8 KB |
| blk-wbt.c | -rw-r--r-- | 17.5 KB |
| blk-wbt.h | -rw-r--r-- | 4.0 KB |
| blk-zoned.c | -rw-r--r-- | 7.6 KB |
| blk.h | -rw-r--r-- | 9.9 KB |
| bounce.c | -rw-r--r-- | 6.5 KB |
| bsg-lib.c | -rw-r--r-- | 7.5 KB |
| bsg.c | -rw-r--r-- | 22.8 KB |
| cfq-iosched.c | -rw-r--r-- | 127.1 KB |
| cmdline-parser.c | -rw-r--r-- | 4.9 KB |
| compat_ioctl.c | -rw-r--r-- | 10.9 KB |
| deadline-iosched.c | -rw-r--r-- | 11.2 KB |
| elevator.c | -rw-r--r-- | 27.2 KB |
| genhd.c | -rw-r--r-- | 47.8 KB |
| ioctl.c | -rw-r--r-- | 15.2 KB |
| ioprio.c | -rw-r--r-- | 5.0 KB |
| kyber-iosched.c | -rw-r--r-- | 21.3 KB |
| mq-deadline.c | -rw-r--r-- | 16.8 KB |
| noop-iosched.c | -rw-r--r-- | 2.6 KB |
| opal_proto.h | -rw-r--r-- | 9.3 KB |
| partition-generic.c | -rw-r--r-- | 16.8 KB |
| scsi_ioctl.c | -rw-r--r-- | 19.9 KB |
| sed-opal.c | -rw-r--r-- | 58.5 KB |
| t10-pi.c | -rw-r--r-- | 4.9 KB |
Computing file changes ...
