Eric Lee / smarc-fsl-linux-kernel

10 Jan, 2012

1 commit

  • 12e555089   Merge branch 'staging-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging ... Browse Code »

    * 'staging-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging: (466 commits)
    net/hyperv: Add support for jumbo frame up to 64KB
    net/hyperv: Add NETVSP protocol version negotiation
    net/hyperv: Remove unnecessary kmap_atomic in netvsc driver
    staging/rtl8192e: Register against lib80211
    staging/rtl8192e: Convert to lib80211_crypt_info
    staging/rtl8192e: Convert to lib80211_crypt_data and lib80211_crypt_ops
    staging/rtl8192e: Add lib80211.h to rtllib.h
    staging/mei: add watchdog device registration wrappers
    drm/omap: GEM, deal with cache
    staging: vt6656: int.c, int.h: Change return of function to void
    staging: usbip: removed unused definitions from header
    staging: usbip: removed dead code from receive function
    staging:iio: Drop {mark,unmark}_in_use callbacks
    staging:iio: Drop buffer mark_param_change callback
    staging:iio: Drop the unused buffer enable() and is_enabled() callbacks
    staging:iio: Drop buffer busy flag
    staging:iio: Make sure a device is only opened once at a time
    staging:iio: Disallow modifying buffer size when buffer is enabled
    staging:iio: Disallow changing scan elements in all buffered modes
    staging:iio: Use iio_buffer_enabled instead of open coding it
    ...

    Fix up conflict in drivers/staging/iio/adc/ad799x_core.c (removal of
    module_init due to using module_i2c_driver() helper, next to removal of
    MODULE_ALIAS due to using MODULE_DEVICE_TABLE instead).

    Linus Torvalds
     

02 Jan, 2012

1 commit

23 Dec, 2011

2 commits

  • 221fd753d   Staging: bcm: Fix an invalid dereference to a kmalloc in IOCTL_BCM_BULK_WRM ... Browse Code »

    Variable IoBuffer.InputLength is chosen from userspace,
    and can therefore be less than the intended size. In this
    case,the memory from the kmalloc call is eventually cast
    to a PBULKWRM_BUFFER. If the IoBuffer.InputLength does not
    meet the minimum size of PBULKWRM_BUFFER, then we will get
    a kernel Oops. To resolve this issue, this patch verifies
    IoBuffer.InputLength meets the minimum size before invoking
    the kmalloc call.

    Signed-off-by: Kevin McKinney
    Reviewed-by: Dan Carpenter
    Signed-off-by: Greg Kroah-Hartman

    Kevin McKinney
     
  • b72a7c859   Staging: bcm: Fix information leak in IOCTL_BCM_GET_DRIVER_VERSION ... Browse Code »

    This ioctl, IOCTL_BCM_GET_DRIVER_VERSION, is
    responsible for sending the driver version
    to userspace. However, the requested size stored
    in IoBuffer.OutputLength may be incorrect.
    Therefore, we altered the code to send the
    exact length of the version, plus one for the
    null character.

    Signed-off-by: Kevin McKinney
    Signed-off-by: Greg Kroah-Hartman

    Kevin McKinney
     

13 Dec, 2011

5 commits

09 Dec, 2011

8 commits

29 Nov, 2011

3 commits

27 Nov, 2011

8 commits

23 Oct, 2011

2 commits

12 Oct, 2011

7 commits

30 Sep, 2011

2 commits

  • 2505aa6ce   Staging: bcm: Alter LOC for readability/understandability purposes ... Browse Code »

    This patch alters a line of code to make it more readable
    and easier to understand. The purpose of the original line
    of code was to compute the amount of memory to request from
    kmalloc. This mulit-step algorithm was being done in one
    line of code, thus making it more difficult to understand.
    Therefore, I split this algorithm into three logical steps.

    Signed-off-by: Kevin McKinney
    Signed-off-by: Greg Kroah-Hartman

    Kevin McKinney
     
  • 0a2cc4977   Staging: bcm: Add min/max restrictions for IOCTL_BCM_REGISTER_READ_PRIVATE ... Browse Code »

    This patch fixes two issues within bcm/Bcmchar.c. The
    first condition in the or statement checks if variable
    IoBuffer.OutputLength, defined from user space, is
    greater than the maximum value allowed for an
    unsigned short. IoBuffer.OutputLength is then used
    in a kmalloc call to return a pointer to memory. If
    this size is greater than an unsigned short, it
    becomes useless. The second condition in the or statement
    checks if the same variable, IoBuffer.OutputLength is
    equal to zero before invoking the kmalloc call. In
    this case, if a zero size is sent to kmalloc, a valid
    pointer to memory is returned instead of the expected NULL.

    Signed-off-by: Kevin McKinney
    Signed-off-by: Greg Kroah-Hartman

    Kevin McKinney
     

27 Sep, 2011

1 commit