1. 01 Feb, 2012 2 commits
  2. 31 Jan, 2012 3 commits
  3. 30 Jan, 2012 1 commit
  4. 27 Jan, 2012 1 commit
  5. 26 Jan, 2012 1 commit
  6. 25 Jan, 2012 5 commits
  7. 24 Jan, 2012 1 commit
    • Jesper Juhl's avatar
      ASoC: wm2000: Fix use-after-free - don't release_firmware() twice on error · c83f1d7e
      Jesper Juhl authored
      In wm2000_i2c_probe(), if we take the true branch in
      
      "
        ret = snd_soc_register_codec(&i2c->dev, &soc_codec_dev_wm2000,
                                     NULL, 0);
        if (ret != 0)
                goto err_fw;
      "
      
      then we'll release_firmware(fw) at the 'err_fw' label. But we've already
      done that just a few lines above. That's a use-after-free bug.
      
      This patch restructures the code so that we always call
      release_firmware(fw) before leaving the function, but only ever call
      it once.
      This means that we have to initialize 'fw' to NULL since some paths
      may now end up calling it without having called request_firmware(),
      but since request_firmware() deals gracefully with NULL pointers, we
      are fine if we just NULL initialize it.
      Signed-off-by: default avatarJesper Juhl <jj@chaosbits.net>
      Signed-off-by: default avatarMark Brown <broonie@opensource.wolfsonmicro.com>
      c83f1d7e
  8. 23 Jan, 2012 1 commit
  9. 22 Jan, 2012 1 commit
  10. 20 Jan, 2012 7 commits
  11. 19 Jan, 2012 16 commits
  12. 18 Jan, 2012 1 commit
    • Linus Torvalds's avatar
      Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending · 4ba3069f
      Linus Torvalds authored
      * 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending: (26 commits)
        target: Set additional sense length field in sense data
        target: Remove legacy device status check from transport_execute_tasks
        target: Remove __transport_execute_tasks() for each processing context
        target: Remove extra se_device->execute_task_lock access in fast path
        target: Drop se_device TCQ queue_depth usage from I/O path
        target: Fix possible NULL pointer with __transport_execute_tasks
        target: Remove TFO->check_release_cmd() fabric API caller
        tcm_fc: Convert ft_send_work to use target_submit_cmd
        target: Add target_submit_cmd() for process context fabric submission
        target: Make target_put_sess_cmd use target_release_cmd_kref
        target: Set response format in INQUIRY response
        target: tcm_mod_builder: small fixups
        Documentation/target: Fix tcm_mod_builder.py build breakage
        target: remove overagressive ____cacheline_aligned annoations
        tcm_loop: bump max_sectors
        target/configs: remove trailing newline from udev_path and alias
        iscsi-target: fix chap identifier simple_strtoul usage
        target: remove useless casts
        target: simplify target_check_cdb_and_preempt
        target: Move core_scsi3_check_cdb_abort_and_preempt
        ...
      4ba3069f