android_kernel_samsung_sm8650/drivers
Badhri Jagan Sridharan e4411db286 FROMLIST: usb: typec: altmodes/displayport: fix pin_assignment_show
This patch fixes negative indexing of buf array in pin_assignment_show
when get_current_pin_assignments returns 0 i.e. no compatible pin
assignments.

BUG: KASAN: use-after-free in pin_assignment_show+0x26c/0x33c
...
Call trace:
dump_backtrace+0x110/0x204
dump_stack_lvl+0x84/0xbc
print_report+0x358/0x974
kasan_report+0x9c/0xfc
__do_kernel_fault+0xd4/0x2d4
do_bad_area+0x48/0x168
do_tag_check_fault+0x24/0x38
do_mem_abort+0x6c/0x14c
el1_abort+0x44/0x68
el1h_64_sync_handler+0x64/0xa4
el1h_64_sync+0x78/0x7c
pin_assignment_show+0x26c/0x33c
dev_attr_show+0x50/0xc0

Bug: 281126270
Change-Id: I117ec48a09df969029dc1b2f6cb0baea13200ff0
Link: https://lore.kernel.org/lkml/20230508214443.893436-1-badhri@google.com/T/
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Reviewed-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
2023-05-11 17:18:58 +00:00
..
accessibility tty: fix possible null-ptr-defer in spk_ttyio_release 2023-01-24 07:24:37 +01:00
acpi ACPI: resource: Add Medion S17413 to IRQ override quirk 2023-04-20 12:35:12 +02:00
amba
android ANDROID: cgroup: Add vendor hook for cpuset. 2023-05-11 13:10:00 +00:00
ata UPSTREAM: scsi: ata: libata-scsi: Convert to scsi_execute_cmd() 2023-03-15 16:17:14 +00:00
atm atm: idt77252: fix kmemleak when rmmod idt77252 2023-03-30 12:49:09 +02:00
auxdisplay auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() 2023-03-11 13:55:16 +01:00
base Merge 6.1.18 into android14-6.1 2023-03-21 08:22:15 +00:00
bcma
block ANDROID: zram: allow zram to allocate CMA pages 2023-04-26 17:01:52 +00:00
bluetooth bluetooth: btbcm: Fix logic error in forming the board name. 2023-04-20 12:35:06 +02:00
bus bus: imx-weim: fix branch condition evaluates to a garbage value 2023-03-30 12:49:29 +02:00
cdrom
char tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address 2023-03-17 08:50:30 +01:00
clk This is the 6.1.25 stable release 2023-04-26 13:13:19 +00:00
clocksource FROMLIST: clocksource/drivers/timer-mediatek: Make timer-mediatek become loadable module 2023-05-09 09:49:00 +00:00
comedi comedi: adv_pci1760: Fix PWM instruction handling 2023-01-24 07:24:35 +01:00
connector
counter counter: 104-quad-8: Fix Synapse action reported for Index signals 2023-04-13 16:55:31 +02:00
cpufreq Revert "Revert "ANDROID: cpufreq: Add a restricted vendor hook for freq transition"" 2023-05-09 08:09:49 +00:00
cpuidle Merge 6.1.21 into android14-6.1 2023-03-24 08:47:17 +00:00
crypto crypto: qat - fix out-of-bounds read 2023-03-10 09:34:19 +01:00
cxl cxl/pci: Handle excessive CDAT length 2023-04-13 16:55:25 +02:00
dax dax/kmem: Fix leak of memory-hotplug resources 2023-03-10 09:34:25 +01:00
dca
devfreq PM/devfreq: governor: Add a private governor_data for governor 2023-01-07 11:11:40 +01:00
dio drivers: dio: fix possible memory leak in dio_init() 2022-12-31 13:32:38 +01:00
dma This is the 6.1.25 stable release 2023-04-26 13:13:19 +00:00
dma-buf ANDROID: dma-buf: heaps: dmabuf page pool spinlock should be spinlock_t 2023-04-26 17:01:50 +00:00
edac EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info 2023-02-01 08:34:40 +01:00
eisa
extcon extcon: usbc-tusb320: Update state on probe even if no IRQ pending 2022-12-31 13:32:39 +01:00
firewire firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region 2023-02-09 11:27:59 +01:00
firmware This is the 6.1.25 stable release 2023-04-26 13:13:19 +00:00
fpga fpga: microchip-spi: rewrite status polling in a time measurable way 2023-03-10 09:33:34 +01:00
fsi use less confusing names for iov_iter direction initializers 2023-02-09 11:28:04 +01:00
gnss
gpio Revert "Revert "pwm: Make .get_state() callback return an error code"" 2023-05-11 05:22:29 +00:00
gpu Revert "Revert "pwm: Make .get_state() callback return an error code"" 2023-05-11 05:22:29 +00:00
greybus
hid This is the 6.1.25 stable release 2023-04-26 13:13:19 +00:00
hsi HSI: omap_ssi_core: Fix error handling in ssi_init() 2022-12-31 13:32:45 +01:00
hte
hv Merge 6.1.24 into android14-6.1 2023-04-22 08:52:25 +00:00
hwmon This is the 6.1.25 stable release 2023-04-26 13:13:19 +00:00
hwspinlock
hwtracing coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug 2023-04-13 16:55:30 +02:00
i2c This is the 6.1.25 stable release 2023-04-26 13:13:19 +00:00
i3c
idle Revert "cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*" 2023-04-06 12:10:58 +02:00
iio iio: light: tsl2772: fix reading proximity-diodes from device tree 2023-04-26 14:28:38 +02:00
infiniband RDMA/core: Fix GID entry ref leak when create_ah fails 2023-04-20 12:35:10 +02:00
input Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table 2023-04-06 12:10:50 +02:00
interconnect interconnect: qcom: qcm2290: Fix MASTER_SNOC_BIMC_NRT 2023-03-30 12:48:59 +02:00
iommu ANDROID: iommu/dma: Add support for DMA_ATTR_SYS_CACHE_NWA 2023-05-01 21:16:31 -07:00
ipack
irqchip ANDROID: gic: Add vendor hook for gic-v3 resume 2023-03-20 10:53:38 -07:00
isdn use less confusing names for iov_iter direction initializers 2023-02-09 11:28:04 +01:00
leds Revert "Revert "pwm: Make .get_state() callback return an error code"" 2023-05-11 05:22:29 +00:00
macintosh macintosh: windfarm: Use unsigned type for 1-bit bitfields 2023-03-17 08:50:31 +01:00
mailbox ANDROID: virt: gunyah: Move arch_is_gh_guest under RM probe 2023-04-11 15:26:03 +00:00
mcb mcb: mcb-parse: fix error handing in chameleon_parse_gdd() 2022-12-31 13:32:41 +01:00
md Merge 6.1.24 into android14-6.1 2023-04-22 08:52:25 +00:00
media FROMGIT: media: add RealVideo format RV30 and RV40 2023-04-24 10:45:38 +00:00
memory memory: tegra30-emc: fix interconnect registration race 2023-03-22 13:33:56 +01:00
memstick memstick/ms_block: Add check for alloc_ordered_workqueue 2022-12-31 13:32:25 +01:00
message FROMGIT: scsi: core: Change the return type of .eh_timed_out() 2023-03-15 16:17:14 +00:00
mfd mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak 2023-03-11 13:55:32 +01:00
misc Revert "ANDROID: uid_sys_stat: split the global lock uid_lock to the fine-grained" 2023-05-09 04:56:36 +00:00
mmc Merge 6.1.21 into android14-6.1 2023-03-24 08:47:17 +00:00
most
mtd mtd: spi-nor: fix memory leak when using debugfs_lookup() 2023-04-26 14:28:37 +02:00
mux
net Merge 55fba69fbf ("rust: kernel: Mark rust_fmt_argument as extern "C"") into android14-6.1 2023-05-09 03:32:41 +00:00
nfc nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition 2023-03-22 13:33:46 +01:00
ntb
nubus
nvdimm cxl/pmem: Fix nvdimm registration races 2023-03-10 09:34:20 +01:00
nvme Merge 55fba69fbf ("rust: kernel: Mark rust_fmt_argument as extern "C"") into android14-6.1 2023-05-09 03:32:41 +00:00
nvmem nvmem: core: fix return value 2023-02-09 11:28:25 +01:00
of ANDROID: of: of_reserved_mem: Increase limit for reserved_mem regions 2023-03-22 14:27:16 +00:00
opp OPP: fix error checking in opp_migrate_dentry() 2023-03-10 09:33:01 +01:00
parisc parisc: led: Fix potential null-ptr-deref in start_task() 2023-01-07 11:11:55 +01:00
parport
pci Merge 6.1.24 into android14-6.1 2023-04-22 08:52:25 +00:00
pcmcia
peci
perf Partially revert "perf/arm-cmn: Optimise DTC counter accesses" 2023-02-01 08:34:49 +01:00
phy phy: rockchip-typec: Fix unsigned comparison with less than zero 2023-03-11 13:55:40 +01:00
pinctrl Revert "pinctrl: amd: Disable and mask interrupts on resume" 2023-04-20 12:35:05 +02:00
platform platform/x86: asus-nb-wmi: Add quirk_asus_tablet_mode to other ROG Flow X13 models 2023-04-26 14:28:37 +02:00
pnp PNP: fix name memory leak in pnp_alloc_dev() 2022-12-31 13:31:56 +01:00
power This is the 6.1.25 stable release 2023-04-26 13:13:19 +00:00
powercap powercap: fix possible name leak in powercap_register_zone() 2023-03-10 09:32:56 +01:00
pps
ps3
ptp ptp_qoriq: fix memory leak in probe() 2023-04-06 12:10:44 +02:00
pwm Revert "Revert "pwm: meson: Explicitly set .polarity in .get_state()"" 2023-05-11 05:22:29 +00:00
rapidio rapidio: devices: fix missing put_device in mport_cdev_open 2022-12-31 13:32:00 +01:00
ras
regulator regulator: fan53555: Fix wrong TCS_SLEW_MASK 2023-04-26 14:28:32 +02:00
remoteproc Merge 6.1.16 into android14-6.1 2023-03-13 15:45:34 +00:00
reset reset: uniphier-glue: Fix possible null-ptr-deref 2023-02-01 08:34:05 +01:00
rpmsg rpmsg: glink: Release driver_override 2023-03-10 09:33:45 +01:00
rtc rtc: allow rtc_read_alarm without read_alarm callback 2023-03-11 13:55:30 +01:00
s390 s390/vfio-ap: fix memory leak in vfio_ap device driver 2023-04-06 12:10:46 +02:00
sbus
scsi Merge 55fba69fbf ("rust: kernel: Mark rust_fmt_argument as extern "C"") into android14-6.1 2023-05-09 03:32:41 +00:00
sh
siox
slimbus
soc FROMGIT: soc: qcom: geni-se: Move qcom-geni-se.h to linux/soc/qcom/geni-se.h 2023-04-13 14:26:27 +00:00
soundwire soundwire: cadence: Drain the RX FIFO after an IO timeout 2023-03-11 13:55:40 +01:00
spi Merge 55fba69fbf ("rust: kernel: Mark rust_fmt_argument as extern "C"") into android14-6.1 2023-05-09 03:32:41 +00:00
spmi
ssb
staging FROMLIST: staging: greybus: drop loopback test files 2023-04-06 15:46:10 +00:00
target Merge 6.1.22 into android14-6.1 2023-03-31 08:15:39 +00:00
tc
tee tee: amdtee: fix race condition in amdtee_open_session 2023-03-30 12:49:29 +02:00
thermal Merge 6.1.18 into android14-6.1 2023-03-21 08:22:15 +00:00
thunderbolt thunderbolt: Limit USB3 bandwidth of certain Intel USB4 host routers 2023-04-06 12:10:33 +02:00
tty Merge 6.1.24 into android14-6.1 2023-04-22 08:52:25 +00:00
ufs FROMLIST: scsi: ufs: core: Fix mcq nr_hw_queues 2023-05-11 03:22:33 +00:00
uio uio: uio_dmem_genirq: Fix deadlock between irq config and handling 2022-12-31 13:32:38 +01:00
usb FROMLIST: usb: typec: altmodes/displayport: fix pin_assignment_show 2023-05-11 17:18:58 +00:00
vdpa vp_vdpa: fix the crash in hot unplug with vp_vdpa 2023-03-22 13:34:03 +01:00
vfio vfio/type1: restore locked_vm 2023-03-10 09:34:32 +01:00
vhost vhost-vdpa: free iommu domain after last use during cleanup 2023-03-22 13:33:44 +01:00
video fbcon: set_con2fb_map needs to set con2fb_map! 2023-04-20 12:35:07 +02:00
virt ANDROID: virt: gunyah: Move arch_is_gh_guest under RM probe 2023-04-11 15:26:03 +00:00
virtio Merge 6.1.8 into android14-6.1 2023-01-26 12:13:04 +00:00
vlynq
w1 w1: fix WARNING after calling w1_process() 2023-02-01 08:34:26 +01:00
watchdog watchdog: sbsa_wdog: Make sure the timeout programming is within the limits 2023-03-11 13:55:24 +01:00
xen xen/grant-dma-iommu: Implement a dummy probe_device() callback 2023-03-10 09:33:02 +01:00
zorro
Kconfig
Makefile
OWNERS