android_kernel_google_msm/drivers/dma
Linus Walleij 8d8e4839b5 dma: ste_dma40: don't dereference free:d descriptor
commit e9baa9d9d5 upstream.

It appears that in the DMA40 driver the DMA tasklet will very
often dereference memory for a descriptor just free:d from the
DMA40 slab. Nothing happens because no other part of the driver
has yet had a chance to claim this memory, but it's really
nasty to dereference free:d memory, so let's check the flag
before the descriptor is free and store it in a bool variable.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
Signed-off-by: Vinod Koul <vinod.koul@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2014-03-11 16:10:02 -07:00
..
ioat ioat: Fix DMA memory sync direction correct flag 2013-01-27 20:47:44 -08:00
ipu
ppc4xx
amba-pl08x.c dmaengine/amba-pl08x : reset phychan_hold on terminate all 2012-04-25 15:10:57 +05:30
at_hdmac.c dmaengine: at_hdmac: check that each sg data length is non-null 2012-10-02 10:30:10 -07:00
at_hdmac_regs.h
coh901318.c
coh901318_lli.c
coh901318_lli.h
dmaengine.c drivers/dma/dmaengine.c: lower the priority of 'failed to get' dma channel message 2012-10-13 05:38:38 +09:00
dmaengine.h
dmatest.c
dw_dmac.c
dw_dmac_regs.h
ep93xx_dma.c dmaengine: fix cyclic dma usage 2012-05-15 08:43:40 +05:30
fsldma.c
fsldma.h
imx-dma.c dmaengine: imx-dma: fix slow path issue in prep_dma_cyclic 2013-10-13 15:42:49 -07:00
imx-sdma.c
intel_mid_dma.c
intel_mid_dma_regs.h
iop-adma.c
iovlock.c
Kconfig net_dma: mark broken 2014-01-08 09:42:11 -08:00
Makefile
mpc512x_dma.c
mv_xor.c
mv_xor.h
mxs-dma.c dma: mxs-dma: enable channel in device_issue_pending call 2012-04-20 15:35:58 +05:30
pch_dma.c pch_dma: Use GFP_ATOMIC because called from interrupt context 2013-05-19 10:54:48 -07:00
pl330.c drivers/dma/pl330.c: fix locking in pl330_free_chan_resources() 2013-07-21 18:19:02 -07:00
sa11x0-dma.c
shdma.c
shdma.h
sirf-dma.c dmaengine: sirf: fix a typo in moving running dma_desc to active queue 2012-10-31 10:03:02 -07:00
ste_dma40.c dma: ste_dma40: don't dereference free:d descriptor 2014-03-11 16:10:02 -07:00
ste_dma40_ll.c
ste_dma40_ll.h dma40: Improve the logic of stopping logical chan 2012-04-23 17:56:17 +05:30
timb_dma.c
TODO
txx9dmac.c
txx9dmac.h