linux-hardened/drivers/misc/mei
Alexander Usyskin 6cbb097fd3 mei: fix double freeing of a cb during link reset
Fix double freeing of the cb that can happen if link reset kicks  in the
middle of blocked write from a device on the cl bus.

Free cb inside mei_cl_write function on failure and drop cb free
operation from callers, during a link reset the mei_cl_write function
returns with an error,  but the caller doesn't know if the cb was
already queued or not so it doesn't know if the cb will be freed upon
queue reclaim or it has to free it itself.

Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2016-02-11 19:23:28 -08:00
..
amthif.c mei: split amthif client init from end of clients enumeration 2016-02-07 14:47:20 -08:00
bus-fixup.c mei: drop reserved host client ids 2016-02-07 14:47:20 -08:00
bus.c mei: fix double freeing of a cb during link reset 2016-02-11 19:23:28 -08:00
client.c mei: fix double freeing of a cb during link reset 2016-02-11 19:23:28 -08:00
client.h mei: split amthif client init from end of clients enumeration 2016-02-07 14:47:20 -08:00
debugfs.c mei: hbm: send immediate reply flag in enum request 2016-02-07 14:47:20 -08:00
hbm.c mei: split amthif client init from end of clients enumeration 2016-02-07 14:47:20 -08:00
hbm.h mei: me: d0i3: add d0i3 enter/exit state machine 2015-08-03 17:33:55 -07:00
hw-me-regs.h mei: me: add sunrise point device ids 2015-08-03 17:33:55 -07:00
hw-me.c mei: trace pci configuration space io 2016-02-07 13:00:52 -08:00
hw-me.h mei: me: d0i3: enable d0i3 interrupts 2015-08-03 17:33:54 -07:00
hw-txe-regs.h mei: extract fw status registers 2014-05-03 19:21:22 -04:00
hw-txe.c mei: trace pci configuration space io 2016-02-07 13:00:52 -08:00
hw-txe.h mei: fix kernel-doc warnings 2014-09-29 11:56:02 -04:00
hw.h mei: hbm: send immediate reply flag in enum request 2016-02-07 14:47:20 -08:00
init.c mei: split amthif client init from end of clients enumeration 2016-02-07 14:47:20 -08:00
interrupt.c mei: discard replies from unconnected fixed address clients 2016-02-07 14:47:20 -08:00
Kconfig mei: wd: drop the watchdog code from the core mei driver 2016-02-06 22:11:06 -08:00
main.c mei: fix double freeing of a cb during link reset 2016-02-11 19:23:28 -08:00
Makefile mei: wd: drop the watchdog code from the core mei driver 2016-02-06 22:11:06 -08:00
mei-trace.c mei: trace pci configuration space io 2016-02-07 13:00:52 -08:00
mei-trace.h mei: drop superfluous closing bracket from write traces 2016-02-07 14:47:20 -08:00
mei_dev.h mei: split amthif client init from end of clients enumeration 2016-02-07 14:47:20 -08:00
pci-me.c mei: call stop on failed char device register 2016-02-07 14:47:20 -08:00
pci-txe.c mei: call stop on failed char device register 2016-02-07 14:47:20 -08:00