Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Commits on Mar 26, 2013
  1. mailbox: fix invalid use of sizeof in mailbox_msg_send()

    Wei Yongjun authored committed
    sizeof() when applied to a pointer typed expression gives the
    size of the pointer, not that of the pointed data.
    
    Signed-off-by: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
    Signed-off-by: Suman Anna <s-anna@ti.com>
Commits on Mar 14, 2013
  1. mailbox: call request_irq after mbox queues are allocated

    authored
    The mailbox startup code is enabling the interrupt even before
    any of the associated mailbox queues are allocated. Any pending
    received mailbox message could cause a kernel panic as soon as
    the interrupt is enabled due to the dereferencing of non-existing
    mailbox queues within the ISR.
    
    Signed-off-by: Fernando Guzman Lugo <lugo.fernando@gmail.com>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  2. mailbox: check for NULL nb in mailbox_put

    authored
    The mailbox_put function must check the notifier block for
    NULL before trying to unregister it.
    
    Signed-off-by: Fernando Guzman Lugo <lugo.fernando@gmail.com>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  3. mailbox/omap: check iomem resource before dereferencing it

    authored
    Add a NULL check for iomem resource in mailbox probe functions.
    
    Signed-off-by: Fernando Guzman Lugo <lugo.fernando@gmail.com>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  4. @ydrallap

    mailbox: create dbx500 mailbox driver

    ydrallap authored committed
    Add STEriccson DBX500 PRCM mailbox support.
    
    Signed-off-by: Loic Pallardy <loic.pallardy@st.com>
    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  5. @ydrallap

    mailbox: add no_irq send message

    ydrallap authored committed
    For debug purpose, mailbox must be available when
    interrupts are disabled to collect dump information.
    
    Signed-off-by: Loic Pallardy <loic.pallardy@st.com>
    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  6. @ydrallap

    mailbox: add IRQF_NO_SUSPEND flag

    ydrallap authored committed
    Coprocessor must be accessible during suspend transitions.
    
    Signed-off-by: Loic Pallardy <loic.pallardy@st.com>
    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  7. @ydrallap

    mailbox: add shared memory mailbox type

    ydrallap authored committed
    Some mailboxes are made up of cross interrupts
    and associated shared memory.
    Shared memory mapping is fixed and cross interrupt/shared
    memory relation make impossible the use of virtio.
    Mailbox framework must be enough opened to support
    any kind of mailbox.
    
    Signed-off-by: Loic Pallardy <loic.pallardy@st.com>
    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  8. @ydrallap

    mailbox: change protection mechanisms

    ydrallap authored committed
    TX: replace spin by mutex to release CPU
    during wait on mailbox resource.
    
    Signed-off-by: Loic Pallardy <loic.pallardy@st.com>
    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  9. @ydrallap

    mailbox: create opened message type

    ydrallap authored committed
    Current message type is a u32 to fit HW fifo format.
    This should be extended to support any message exchanges
    and type of mailbox.
    
    Proposed structure owns the original u32 and an optional
    pointer on additional data.
    
    Adaptations made to remoteproc and tidspbridge drivers.
    
    Signed-off-by: Loic Pallardy <loic.pallardy@st.com>
    Signed-off-by: Omar Ramirez Luna <omar.ramirez@copitl.com>
    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  10. @ydrallap

    mailbox: rename omap_mbox in mailbox

    ydrallap authored committed
    In order to create a generic mailbox framework, functions
    and structures should be renamed in mailbox.
    
    Taking care of remoteproc and tidspbridge while at it.
    
    Signed-off-by: Loic Pallardy <loic.pallardy@st.com>
    Signed-off-by: Omar Ramirez Luna <omar.ramirez@copitl.com>
    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  11. mailbox: split internal header from API header

    Omar Ramirez Luna authored committed
    Now internal structures can remain hidden to the user and just API
    related functions and defines are made available.
    
    Signed-off-by: Omar Ramirez Luna <omar.luna@linaro.org>
    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
    Signed-off-by: Suman Anna <s-anna@ti.com>
  12. mailbox: OMAP: introduce mailbox framework

    Omar Ramirez Luna authored committed
    Actually moving it from plat-omap, as this framework/driver code is
    supposed to be under drivers/ folder. The framework should work with
    the current supported OMAP processors (OMAP1+) that have mailbox and
    can be used as a method of interprocessor communication.
    
    The mailbox hardware (in OMAP) uses a queued mailbox-interrupt mechanism
    that provides a communication channel between processors through a set of
    registers and their associated interrupt signals by sending and receiving
    messages.
    
    As part of the migration from plat and mach code:
    - Kconfig symbols have been renamed to build OMAP1 or OMAP2+ drivers.
    - mailbox.h has been changed from plat to a dedicated drivers/ folder.
    
    Module names have changed too, instead of mailbox_mach:
    - OMAP1: mailbox-omap1.ko
    - OMAP2+: mailbox-omap2.ko
    
    Signed-off-by: Omar Ramirez Luna <omar.luna@linaro.org>
    Acked-by: Tony Lindgren <tony@atomide.com>
    Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
    [s-anna@ti.com: Kconfig fixes for build errors]
    Signed-off-by: Suman Anna <s-anna@ti.com>
Commits on Mar 13, 2013
  1. ARM: OMAP2+: mbox: remove dependencies with soc.h

    authored
    The OMAP mailbox platform driver code has been cleaned up to
    remove the dependencies with soc.h in preparation for moving
    the mailbox code to drivers folder.
    
    The code relied on cpu_is_xxx/soc_is_xxx macros previously to
    pick the the right set of mailbox devices and register with the
    mailbox driver. This data is now represented in a concise format
    and moved to the respective omap_hwmod data files and published
    to the driver through the platform data.
    
    Signed-off-by: Suman Anna <s-anna@ti.com>
Commits on Mar 11, 2013
  1. mailbox: rename pl320-ipc specific mailbox.h

    authored
    The patch 3005867 "ARM / highbank: add support for pl320 IPC"
    added a pl320 IPC specific header file as a generic mailbox.h.
    This file has been renamed appropriately to allow the
    introduction of the generic mailbox API framework.
    
    Signed-off-by: Suman Anna <s-anna@ti.com>
    Cc: Mark Langsdorf <mark.langsdorf@calxeda.com>
    Cc: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Commits on Mar 10, 2013
  1. @torvalds

    Linux 3.9-rc2

    torvalds authored
  2. @torvalds

    Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel…

    torvalds authored
    …/git/ebiederm/user-namespace
    
    Pull namespace bugfixes from Eric Biederman:
     "This is three simple fixes against 3.9-rc1.  I have tested each of
      these fixes and verified they work correctly.
    
      The userns oops in key_change_session_keyring and the BUG_ON triggered
      by proc_ns_follow_link were found by Dave Jones.
    
      I am including the enhancement for mount to only trigger requests of
      filesystem modules here instead of delaying this for the 3.10 merge
      window because it is both trivial and the kind of change that tends to
      bit-rot if left untouched for two months."
    
    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace:
      proc: Use nd_jump_link in proc_ns_follow_link
      fs: Limit sys_mount to only request filesystem modules (Part 2).
      fs: Limit sys_mount to only request filesystem modules.
      userns: Stop oopsing in key_change_session_keyring
Commits on Mar 9, 2013
  1. @torvalds

    Atmel MXT touchscreen: increase reset timeouts

    torvalds authored
    There is a more complete atmel patch-series out by Nick Dyer that fixes
    this and other things, but in the meantime this is the minimal thing to
    get the touchscreen going on (at least my) Pixel Chromebook.
    
    Not that I want my dirty fingers near that beautiful screen, but it
    seems that a non-initialized touchscreen will also end up being a
    constant wakeup source, so you have to disable it to go to sleep.  And
    it's easier to just fix the initialization sequence.
    
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  2. @ebiederm

    proc: Use nd_jump_link in proc_ns_follow_link

    ebiederm authored
    Update proc_ns_follow_link to use nd_jump_link instead of just
    manually updating nd.path.dentry.
    
    This fixes the BUG_ON(nd->inode != parent->d_inode) reported by Dave
    Jones and reproduced trivially with mkdir /proc/self/ns/uts/a.
    
    Sigh it looks like the VFS change to require use of nd_jump_link
    happend while proc_ns_follow_link was baking and since the common case
    of proc_ns_follow_link continued to work without problems the need for
    making this change was overlooked.
    
    Cc: stable@vger.kernel.org
    Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
  3. @torvalds

    Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel…

    torvalds authored
    …/git/mason/linux-btrfs
    
    Pull btrfs fixes from Chris Mason:
     "These are scattered fixes and one performance improvement.  The
      biggest functional change is in how we throttle metadata changes.  The
      new code bumps our average file creation rate up by ~13% in fs_mark,
      and lowers CPU usage.
    
      Stefan bisected out a regression in our allocation code that made
      balance loop on extents larger than 256MB."
    
    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
      Btrfs: improve the delayed inode throttling
      Btrfs: fix a mismerge in btrfs_balance()
      Btrfs: enforce min_bytes parameter during extent allocation
      Btrfs: allow running defrag in parallel to administrative tasks
      Btrfs: avoid deadlock on transaction waiting list
      Btrfs: do not BUG_ON on aborted situation
      Btrfs: do not BUG_ON in prepare_to_reloc
      Btrfs: free all recorded tree blocks on error
      Btrfs: build up error handling for merge_reloc_roots
      Btrfs: check for NULL pointer in updating reloc roots
      Btrfs: fix unclosed transaction handler when the async transaction commitment fails
      Btrfs: fix wrong handle at error path of create_snapshot() when the commit fails
      Btrfs: use set_nlink if our i_nlink is 0
  4. @bleungatchromium @torvalds

    Platform: x86: chromeos_laptop : Add basic platform data for atmel de…

    bleungatchromium authored torvalds committed
    …vices
    
    Add basic platform data to get the current upstream driver working
    with the 224s touchpad and 1664s touchscreen.
    We will be using NULL config so we will use the settings from the
    devices' NVRAMs.
    
    Signed-off-by: Benson Leung <bleung@chromium.org>
    Tested-by: Olof Johansson <olof@lixom.net>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  5. @djkurtz @torvalds

    Input: atmel_mxt_ts - Support for touchpad variant

    djkurtz authored torvalds committed
    This same driver can be used by atmel based touchscreens and touchpads
    (buttonpads). Platform data may specify a device is a touchpad
    using the is_tp flag.
    
    This will cause the driver to perform some touchpad specific
    initializations, such as:
      * register input device name "Atmel maXTouch Touchpad" instead of
      Touchscreen.
      * register BTN_LEFT & BTN_TOOL_* event types.
      * register axis resolution (as a fixed constant, for now)
      * register BUTTONPAD property
      * process GPIO buttons using reportid T19
    
    Input event GPIO mapping is done by the platform data key_map array.
    
    key_map[x] should contain the KEY or BTN code to send when processing
    GPIOx from T19. To specify a GPIO as not an input source, populate
    with KEY_RESERVED, or 0.
    
    Signed-off-by: Daniel Kurtz <djkurtz@chromium.org>
    Signed-off-by: Benson Leung <bleung@chromium.org>
    Signed-off-by: Nick Dyer <nick.dyer@itdev.co.uk>
    Tested-by: Olof Johansson <olof@lixom.net>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Commits on Mar 8, 2013
  1. @torvalds

    Merge branch 'for-next' of git://git.samba.org/sfrench/cifs-2.6

    torvalds authored
    Pull CIFS fixes from Steve French:
     "A small set of cifs fixes which includes one for a recent regression
      in the write path (pointed out by Anton), some fixes for rename
      problems and as promised for 3.9 removing the obsolete sockopt mount
      option (and the accompanying deprecation warning)."
    
    * 'for-next' of git://git.samba.org/sfrench/cifs-2.6:
      CIFS: Fix missing of oplock_read value in smb30_values structure
      cifs: don't try to unlock pagecache page after releasing it
      cifs: remove the sockopt= mount option
      cifs: Check server capability before attempting silly rename
      cifs: Fix bug when checking error condition in cifs_rename_pending_delete()
  2. @torvalds

    Merge branch 'akpm' (fixes from Andrew)

    torvalds authored
    Merge misc fixes from Andrew Morton.
    
    * emailed patches from Andrew Morton <akpm@linux-foundation.org>:
      alpha: boot: fix build breakage introduced by system.h disintegration
      memcg: initialize kmem-cache destroying work earlier
      Randy has moved
      ksm: fix m68k build: only NUMA needs pfn_to_nid
      dmi_scan: fix missing check for _DMI_ signature in smbios_present()
      Revert parts of "hlist: drop the node parameter from iterators"
      idr: remove WARN_ON_ONCE() on negative IDs
      mm/mempolicy.c: fix sp_node_init() argument ordering
      mm/mempolicy.c: fix wrong sp_node insertion
      ipc: don't allocate a copy larger than max
      ipc: fix potential oops when src msg > 4k w/ MSG_COPY
  3. @wildea01 @torvalds

    alpha: boot: fix build breakage introduced by system.h disintegration

    wildea01 authored torvalds committed
    Commit ec22120 ("Disintegrate asm/system.h for Alpha") removed the
    system.h include from boot/head.S, which puts the PAL_* asm constants
    out of scope.
    
    Include <asm/pal.h> so we can get building again.
    
    Signed-off-by: Will Deacon <will.deacon@arm.com>
    Cc: David Rusling <david.rusling@linaro.org>
    Cc: David Howells <dhowells@redhat.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  4. @koct9i @torvalds

    memcg: initialize kmem-cache destroying work earlier

    koct9i authored torvalds committed
    Fix a warning from lockdep caused by calling cancel_work_sync() for
    uninitialized struct work.  This path has been triggered by destructon
    kmem-cache hierarchy via destroying its root kmem-cache.
    
      cache ffff88003c072d80
      obj ffff88003b410000 cache ffff88003c072d80
      obj ffff88003b924000 cache ffff88003c20bd40
      INFO: trying to register non-static key.
      the code is fine but needs lockdep annotation.
      turning off the locking correctness validator.
      Pid: 2825, comm: insmod Tainted: G           O 3.9.0-rc1-next-20130307+ #611
      Call Trace:
        __lock_acquire+0x16a2/0x1cb0
        lock_acquire+0x8a/0x120
        flush_work+0x38/0x2a0
        __cancel_work_timer+0x89/0xf0
        cancel_work_sync+0xb/0x10
        kmem_cache_destroy_memcg_children+0x81/0xb0
        kmem_cache_destroy+0xf/0xe0
        init_module+0xcb/0x1000 [kmem_test]
        do_one_initcall+0x11a/0x170
        load_module+0x19b0/0x2320
        SyS_init_module+0xc6/0xf0
        system_call_fastpath+0x16/0x1b
    
    Example module to demonstrate:
    
      #include <linux/module.h>
      #include <linux/slab.h>
      #include <linux/mm.h>
      #include <linux/workqueue.h>
    
      int __init mod_init(void)
      {
      	int size = 256;
      	struct kmem_cache *cache;
      	void *obj;
      	struct page *page;
    
      	cache = kmem_cache_create("kmem_cache_test", size, size, 0, NULL);
      	if (!cache)
      		return -ENOMEM;
    
      	printk("cache %p\n", cache);
    
      	obj = kmem_cache_alloc(cache, GFP_KERNEL);
      	if (obj) {
      		page = virt_to_head_page(obj);
      		printk("obj %p cache %p\n", obj, page->slab_cache);
      		kmem_cache_free(cache, obj);
      	}
    
      	flush_scheduled_work();
    
      	obj = kmem_cache_alloc(cache, GFP_KERNEL);
      	if (obj) {
      		page = virt_to_head_page(obj);
      		printk("obj %p cache %p\n", obj, page->slab_cache);
      		kmem_cache_free(cache, obj);
      	}
    
      	kmem_cache_destroy(cache);
    
      	return -EBUSY;
      }
    
      module_init(mod_init);
      MODULE_LICENSE("GPL");
    
    Signed-off-by: Konstantin Khlebnikov <khlebnikov@openvz.org>
    Cc: Glauber Costa <glommer@parallels.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  5. @torvalds

    Randy has moved

    Randy Dunlap authored torvalds committed
    Update email address and CREDITS info.  xenotime.net is defunct.
    
    Signed-off-by: Randy Dunlap <rdunlap@infradead.org>
    Cc: Harry Wei <harryxiyou@gmail.com>
    Cc: Keiichi KII <k-keiichi@bx.jp.nec.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  6. @torvalds

    ksm: fix m68k build: only NUMA needs pfn_to_nid

    Hugh Dickins authored torvalds committed
    A CONFIG_DISCONTIGMEM=y m68k config gave
    
      mm/ksm.c: In function `get_kpfn_nid':
      mm/ksm.c:492: error: implicit declaration of function `pfn_to_nid'
    
    linux/mmzone.h declares it for CONFIG_SPARSEMEM and CONFIG_FLATMEM, but
    expects the arch's asm/mmzone.h to declare it for CONFIG_DISCONTIGMEM
    (see arch/mips/include/asm/mmzone.h for example).
    
    Or perhaps it is only expected when CONFIG_NUMA=y: too much of a maze,
    and m68k got away without it so far, so fix the build in mm/ksm.c.
    
    Signed-off-by: Hugh Dickins <hughd@google.com>
    Reported-by: Geert Uytterhoeven <geert@linux-m68k.org>
    Cc: Petr Holasek <pholasek@redhat.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  7. @torvalds

    dmi_scan: fix missing check for _DMI_ signature in smbios_present()

    Ben Hutchings authored torvalds committed
    Commit 9f9c9cb ("drivers/firmware/dmi_scan.c: fetch dmi version
    from SMBIOS if it exists") hoisted the check for "_DMI_" into
    dmi_scan_machine(), which means that we don't bother to check for
    "_DMI_" at offset 16 in an SMBIOS entry.  smbios_present() may also call
    dmi_present() for an address where we found "_SM_", if it failed further
    validation.
    
    Check for "_DMI_" in smbios_present() before calling dmi_present().
    
    [akpm@linux-foundation.org: fix build]
    Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
    Reported-by: Tim McGrath <tmhikaru@gmail.com>
    Tested-by: Tim Mcgrath <tmhikaru@gmail.com>
    Cc: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Cc: <stable@vger.kernel.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  8. @arndb @torvalds

    Revert parts of "hlist: drop the node parameter from iterators"

    arndb authored torvalds committed
    Commit b67bfe0 ("hlist: drop the node parameter from iterators")
    did a lot of nice changes but also contains two small hunks that seem to
    have slipped in accidentally and have no apparent connection to the
    intent of the patch.
    
    This reverts the two extraneous changes.
    
    Signed-off-by: Arnd Bergmann <arnd@arndb.de>
    Cc: Peter Senna Tschudin <peter.senna@gmail.com>
    Cc: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
    Cc: Sasha Levin <sasha.levin@oracle.com>
    Cc: Thomas Gleixner <tglx@linutronix.de>
    Cc: Rusty Russell <rusty@rustcorp.com.au>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  9. @torvalds

    idr: remove WARN_ON_ONCE() on negative IDs

    Tejun Heo authored torvalds committed
    idr_find(), idr_remove() and idr_replace() used to silently ignore the
    sign bit and perform lookup with the rest of the bits.  The weird behavior
    has been changed such that negative IDs are treated as invalid.  As the
    behavior change was subtle, WARN_ON_ONCE() was added in the hope of
    determining who's calling idr functions with negative IDs so that they can
    be examined for problems.
    
    Up until now, all two reported cases are ID number coming directly from
    userland and getting fed into idr_find() and the warnings seem to cause
    more problems than being helpful.  Drop the WARN_ON_ONCE()s.
    
    Signed-off-by: Tejun Heo <tj@kernel.org>
    Reported-by: <markus@trippelsdorf.de>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  10. @kosaki @torvalds

    mm/mempolicy.c: fix sp_node_init() argument ordering

    kosaki authored torvalds committed
    Currently, n_new is wrongly initialized.  start and end parameter are
    inverted.  Let's fix it.
    
    Signed-off-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
    Cc: Hillf Danton <dhillf@gmail.com>
    Cc: Sasha Levin <sasha.levin@oracle.com>
    Cc: Hugh Dickins <hughd@google.com>
    Cc: Mel Gorman <mgorman@suse.de>
    Cc: Dave Jones <davej@redhat.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  11. @torvalds

    mm/mempolicy.c: fix wrong sp_node insertion

    Hillf Danton authored torvalds committed
    n->end is accessed in sp_insert(). Thus it should be update
    before calling sp_insert(). This mistake may make kernel panic.
    
    Signed-off-by: Hillf Danton <dhillf@gmail.com>
    Signed-off-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
    Cc: Sasha Levin <sasha.levin@oracle.com>
    Cc: Hugh Dickins <hughd@google.com>
    Cc: Mel Gorman <mgorman@suse.de>
    Cc: Dave Jones <davej@redhat.com>
    Cc: <stable@vger.kernel.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  12. @peterhurley @torvalds

    ipc: don't allocate a copy larger than max

    peterhurley authored torvalds committed
    When MSG_COPY is set, a duplicate message must be allocated for the copy
    before locking the queue.  However, the copy could not be larger than was
    sent which is limited to msg_ctlmax.
    
    Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
    Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com>
    Cc: <stable@vger.kernel.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
  13. @peterhurley @torvalds

    ipc: fix potential oops when src msg > 4k w/ MSG_COPY

    peterhurley authored torvalds committed
    If the src msg is > 4k, then dest->next points to the
    next allocated segment; resetting it just prior to dereferencing
    is bad.
    
    Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
    Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com>
    Cc: <stable@vger.kernel.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Something went wrong with that request. Please try again.