Linus Walleij 8d8e4839b5 dma: ste_dma40: don't dereference free:d descriptor ...

commit e9baa9d9d5 upstream.

It appears that in the DMA40 driver the DMA tasklet will very
often dereference memory for a descriptor just free:d from the
DMA40 slab. Nothing happens because no other part of the driver
has yet had a chance to claim this memory, but it's really
nasty to dereference free:d memory, so let's check the flag
before the descriptor is free and store it in a bool variable.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
Signed-off-by: Vinod Koul <vinod.koul@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-03-11 16:10:02 -07:00

..

ioat

ioat: Fix DMA memory sync direction correct flag

2013-01-27 20:47:44 -08:00

ipu

…

ppc4xx

…

amba-pl08x.c

dmaengine/amba-pl08x : reset phychan_hold on terminate all

2012-04-25 15:10:57 +05:30

at_hdmac_regs.h

…

at_hdmac.c

dmaengine: at_hdmac: check that each sg data length is non-null

2012-10-02 10:30:10 -07:00

coh901318_lli.c

…

coh901318_lli.h

…

coh901318.c

Merge branch 'akpm' (Andrew's patch-bomb)

2012-04-05 15:30:34 -07:00

dmaengine.c

drivers/dma/dmaengine.c: lower the priority of 'failed to get' dma channel message

2012-10-13 05:38:38 +09:00

dmaengine.h

…

dmatest.c

…

dw_dmac_regs.h

…

dw_dmac.c

…

ep93xx_dma.c

dmaengine: fix cyclic dma usage

2012-05-15 08:43:40 +05:30

fsldma.c

…

fsldma.h

…

imx-dma.c

dmaengine: imx-dma: fix slow path issue in prep_dma_cyclic

2013-10-13 15:42:49 -07:00

imx-sdma.c

Merge branch 'next' of git://git.infradead.org/users/vkoul/slave-dma

2012-03-29 15:34:57 -07:00

intel_mid_dma_regs.h

…

intel_mid_dma.c

…

iop-adma.c

Merge tag 'dmaengine-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/djbw/dmaengine

2012-04-10 15:30:16 -07:00

iovlock.c

…

Kconfig

net_dma: mark broken

2014-01-08 09:42:11 -08:00

Makefile

…

mpc512x_dma.c

…

mv_xor.c

…

mv_xor.h

…

mxs-dma.c

dma: mxs-dma: enable channel in device_issue_pending call

2012-04-20 15:35:58 +05:30

pch_dma.c

pch_dma: Use GFP_ATOMIC because called from interrupt context

2013-05-19 10:54:48 -07:00

pl330.c

drivers/dma/pl330.c: fix locking in pl330_free_chan_resources()

2013-07-21 18:19:02 -07:00

sa11x0-dma.c

ARM: sa11x0: fix build errors from DMA engine API updates

2012-03-30 11:46:20 +01:00

shdma.c

…

shdma.h

…

sirf-dma.c

dmaengine: sirf: fix a typo in moving running dma_desc to active queue

2012-10-31 10:03:02 -07:00

ste_dma40_ll.c

…

ste_dma40_ll.h

dma40: Improve the logic of stopping logical chan

2012-04-23 17:56:17 +05:30

ste_dma40.c

dma: ste_dma40: don't dereference free:d descriptor

2014-03-11 16:10:02 -07:00

timb_dma.c

…

TODO

…

txx9dmac.c

…

txx9dmac.h

…