Linus Walleij aa9d53380e dma: ste_dma40: don't dereference free:d descriptor ...

commit e9baa9d9d520fb0e24cca671e430689de2d4a4b2 upstream.

It appears that in the DMA40 driver the DMA tasklet will very
often dereference memory for a descriptor just free:d from the
DMA40 slab. Nothing happens because no other part of the driver
has yet had a chance to claim this memory, but it's really
nasty to dereference free:d memory, so let's check the flag
before the descriptor is free and store it in a bool variable.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
Signed-off-by: Vinod Koul <vinod.koul@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-03-06 22:06:29 -08:00

..

bestcomm

drivers: clean-up prom.h implicit includes

2013-10-09 20:04:04 -05:00

dw

Merge branch 'next' of git://git.infradead.org/users/vkoul/slave-dma

2013-11-20 13:20:24 -08:00

ioat

ioat: fix tasklet tear down

2014-03-06 22:06:28 -08:00

ipu

dmaengine: ipu: fix warnings from 64-bit dma_addr_t printouts

2013-11-13 14:10:48 +05:30

ppc4xx

dma: fix build warnings in ppc4xx

2013-12-12 22:43:41 -08:00

sh

rcar-hpbdma: initialise plane information when halted

2013-11-28 13:46:00 +05:30

acpi-dma.c

acpi-dma: remove ugly conversion

2013-08-25 16:43:45 +05:30

amba-pl08x.c

Fix pl08x warnings

2013-12-04 11:22:05 +05:30

at_hdmac_regs.h

dmaengine: at_hdmac: remove unused function

2013-12-12 22:43:41 -08:00

at_hdmac.c

Merge commit 'dmaengine-3.13-v2' of git://git.kernel.org/pub/scm/linux/kernel/git/djbw/dmaengine

2013-11-16 12:02:36 +05:30

coh901318_lli.c

Merge branch 'next' of git://git.infradead.org/users/vkoul/slave-dma

2013-02-26 09:24:48 -08:00

coh901318.c

dmaengine: coh901318: use DMA_COMPLETE for dma completion status

2013-10-25 11:15:56 +05:30

coh901318.h

dma: coh901318: merge header files

2013-01-07 17:36:37 +01:00

cppi41.c

dma: cppi41: return code > 0 of pm_runtime_get_sync() is not an error

2013-11-12 14:28:25 +05:30

dma-jz4740.c

dmaengine: jz4740: use DMA_COMPLETE for dma completion status

2013-10-25 11:15:58 +05:30

dmaengine.c

dmaengine: fix sleep in atomic

2013-12-13 00:57:03 -08:00

dmaengine.h

dmaengine: consolidate initialization of cookies

2012-03-13 11:37:22 +05:30

dmatest.c

dmatest: fix build warning on mips

2013-12-12 22:43:41 -08:00

edma.c

Merge branch 'next' of git://git.infradead.org/users/vkoul/slave-dma

2013-11-20 13:20:24 -08:00

ep93xx_dma.c

dmaengine: remove DMA unmap from drivers

2013-11-14 11:04:38 -08:00

fsldma.c

dma: fix fsldma build warnings

2013-12-12 22:43:41 -08:00

fsldma.h

DMA: Freescale: update driver to support 8-channel DMA engine

2013-11-13 14:26:27 +05:30

imx-dma.c

Merge branch 'for-linus' into next

2013-10-31 22:36:13 +05:30

imx-sdma.c

Merge branch 'next' of git://git.infradead.org/users/vkoul/slave-dma

2013-11-20 13:20:24 -08:00

intel_mid_dma_regs.h

dma: fix comments

2012-09-01 08:57:12 -07:00

intel_mid_dma.c

dmaengine: intel_mid_dma: use DMA_COMPLETE for dma completion status

2013-10-25 11:16:04 +05:30

iop-adma.c

Merge commit 'dmaengine-3.13-v2' of git://git.kernel.org/pub/scm/linux/kernel/git/djbw/dmaengine

2013-11-16 12:02:36 +05:30

iovlock.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

k3dma.c

dmaengine: k3dma: use DMA_COMPLETE for dma completion status

2013-10-25 11:16:07 +05:30

Kconfig

net_dma: mark broken

2013-12-18 12:53:43 -08:00

Makefile

dmaengine: add driver for Samsung s3c24xx SoCs

2013-10-08 06:42:10 +09:00

mmp_pdma.c

dma: mmp_pdma: add missing platform_set_drvdata() in mmp_pdma_probe()

2013-11-28 13:39:11 +05:30

mmp_tdma.c

Merge branch 'next' of git://git.infradead.org/users/vkoul/slave-dma

2013-11-20 13:20:24 -08:00

mpc512x_dma.c

drivers: clean-up prom.h implicit includes

2013-10-09 20:04:04 -05:00

mv_xor.c

dmaengine: mv_xor: fix oops when channels fail to initialise

2013-12-12 22:48:53 -08:00

mv_xor.h

dma: mv_xor: Fix mis-usage of mmio 'base' and 'high_base' registers

2013-11-14 11:04:42 -08:00

mxs-dma.c

dma: mxs-dma: Use semaphores for cyclic DMA

2013-11-13 15:38:31 +05:30

of-dma.c

dma: of: make error message more meaningful by adding the node name

2013-08-19 14:45:05 +05:30

omap-dma.c

dmaengine: omap: use DMA_COMPLETE for dma completion status

2013-10-25 11:16:11 +05:30

pch_dma.c

pch_dma: Add MODULE_DEVICE_TABLE

2013-09-02 11:59:58 +05:30

pl330.c

dma: pl330: ensure DMA descriptors are zero-initialised

2013-12-18 10:08:56 -08:00

s3c24xx-dma.c

dma: fix build breakage in s3c24xx-dma

2013-12-04 11:24:30 +05:30

sa11x0-dma.c

dmaengine: sa11x0: use DMA_COMPLETE for dma completion status

2013-10-25 11:16:13 +05:30

sirf-dma.c

dmaengine: sirf: add PM entries for sleep and runtime

2013-08-13 17:01:01 +05:30

ste_dma40_ll.c

dmaengine: ste_dma40_ll: Replace meaningless register set with comment

2013-06-04 11:12:10 +02:00

ste_dma40_ll.h

dmaengine: ste_dma40: Remove unnecessary call to d40_phy_cfg()

2013-05-23 21:13:19 +02:00

ste_dma40.c

dma: ste_dma40: don't dereference free:d descriptor

2014-03-06 22:06:29 -08:00

tegra20-apb-dma.c

dmaengine: tegra: use DMA_COMPLETE for dma completion status

2013-10-25 11:16:16 +05:30

timb_dma.c

dmaengine: remove DMA unmap from drivers

2013-11-14 11:04:38 -08:00

TODO

dmaengine: remove ste_dma40 from issue_pending TODO

2011-07-14 04:02:08 +05:30

txx9dmac.c

dma: fix build warnings in txx9

2013-12-12 22:43:41 -08:00

txx9dmac.h

dmaengine: move last completed cookie into generic dma_chan structure

2012-03-13 11:36:06 +05:30

virt-dma.c

dmaengine: virt-dma: add support for cyclic DMA periodic callbacks

2012-07-01 14:15:23 +01:00

virt-dma.h

dmaengine: virt-dma: add support for cyclic DMA periodic callbacks

2012-07-01 14:15:23 +01:00