Luo Qiu 26f3aa22d6 firmware: arm_scpi: Check the DVFS OPP count returned by the firmware ... [ Upstream commit 109aa654f85c5141e813b2cd1bd36d90be678407 ] Fix a kernel crash with the below call trace when the SCPI firmware returns OPP count of zero. dvfs_info.opp_count may be zero on some platforms during the reboot test, and the kernel will crash after dereferencing the pointer to kcalloc(info->count, sizeof(*opp), GFP_KERNEL). | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 | Mem abort info: | ESR = 0x96000004 | Exception class = DABT (current EL), IL = 32 bits | SET = 0, FnV = 0 | EA = 0, S1PTW = 0 | Data abort info: | ISV = 0, ISS = 0x00000004 | CM = 0, WnR = 0 | user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000faefa08c | [0000000000000028] pgd=0000000000000000 | Internal error: Oops: 96000004 [#1] SMP | scpi-hwmon: probe of PHYT000D:00 failed with error -110 | Process systemd-udevd (pid: 1701, stack limit = 0x00000000aaede86c) | CPU: 2 PID: 1701 Comm: systemd-udevd Not tainted 4.19.90+ #1 | Hardware name: PHYTIUM LTD Phytium FT2000/4/Phytium FT2000/4, BIOS | pstate: 60000005 (nZCv daif -PAN -UAO) | pc : scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi] | lr : clk_register+0x438/0x720 | Call trace: | scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi] | devm_clk_hw_register+0x50/0xa0 | scpi_clk_ops_init.isra.2+0xa0/0x138 [clk_scpi] | scpi_clocks_probe+0x528/0x70c [clk_scpi] | platform_drv_probe+0x58/0xa8 | really_probe+0x260/0x3d0 | driver_probe_device+0x12c/0x148 | device_driver_attach+0x74/0x98 | __driver_attach+0xb4/0xe8 | bus_for_each_dev+0x88/0xe0 | driver_attach+0x30/0x40 | bus_add_driver+0x178/0x2b0 | driver_register+0x64/0x118 | __platform_driver_register+0x54/0x60 | scpi_clocks_driver_init+0x24/0x1000 [clk_scpi] | do_one_initcall+0x54/0x220 | do_init_module+0x54/0x1c8 | load_module+0x14a4/0x1668 | __se_sys_finit_module+0xf8/0x110 | __arm64_sys_finit_module+0x24/0x30 | el0_svc_common+0x78/0x170 | el0_svc_handler+0x38/0x78 | el0_svc+0x8/0x340 | Code: 937d7c00 a94153f3 a8c27bfd f9400421 (b8606820) | ---[ end trace 06feb22469d89fa8 ]--- | Kernel panic - not syncing: Fatal exception | SMP: stopping secondary CPUs | Kernel Offset: disabled | CPU features: 0x10,a0002008 | Memory Limit: none Fixes: 8cb7cf56c9fe ("firmware: add support for ARM System Control and Power Interface(SCPI) protocol") Signed-off-by: Luo Qiu <luoqiu@kylinsec.com.cn> Message-Id: <55A2F7A784391686+20241101032115.275977-1-luoqiu@kylinsec.com.cn> Signed-off-by: Sudeep Holla <sudeep.holla@arm.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-12-17 13:24:03 +01:00
..
accessibility	speakup: Fix sizeof() vs ARRAY_SIZE() bug	2024-11-19 12:26:51 +01:00
acpi	acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()	2024-12-17 13:23:59 +01:00
amba
android	Revert "binder: fix UAF caused by offsets overwrite"	2024-11-24 00:23:38 +01:00
ata	Revert "ata: libata-core: Fix null pointer dereference on error"	2024-11-24 00:23:50 +01:00
atm	atm: idt77252: prevent use after free in dequeue_rx()	2024-11-23 23:20:43 +01:00
auxdisplay
base	regmap: irq: Set lockdep class for hierarchical IRQ domains	2024-12-17 13:24:03 +01:00
battery
bcma
block	Revert "zram: Set default compressor to zstd"	2024-12-03 19:58:37 +01:00
bluetooth	Revert "Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO"	2024-11-24 00:23:50 +01:00
bts
bus	Revert "bus: integrator-lm: fix OF node leak in probe()"	2024-11-24 00:23:16 +01:00
cdrom
char	Revert "tpm: Clean up TPM space after command failure"	2024-11-24 00:23:24 +01:00
clk	clkdev: remove CONFIG_CLKDEV_LOOKUP	2024-12-17 13:24:00 +01:00
clocksource	clocksource/drivers:sp804: Make user selectable	2024-12-17 13:24:00 +01:00
connector
counter	counter: ti-eqep: enable clock at probe	2024-11-19 14:19:33 +01:00
cpufreq	Revert "cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately"	2024-11-24 00:23:30 +01:00
cpuidle	cpuidle: menu: Take negative "sleep length" values into account	2024-11-19 18:01:28 +01:00
crypto	crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()	2024-12-17 13:24:00 +01:00
dax
dca
devfreq	PM / devfreq: Fix buffer overflow in trans_stat_show	2024-11-19 11:32:38 +01:00
dio
dma	dmaengine: dw: Add memory bus width verification	2024-11-23 23:20:55 +01:00
dma-buf	dma-buf/sync_file: Speed up ioctl by omitting debug names	2024-11-19 17:53:23 +01:00
edac	EDAC/fsl_ddr: Fix bad bit shift operations	2024-12-17 13:23:59 +01:00
eisa
extcon	extcon: max8997: select IRQ_DOMAIN instead of depending on it	2024-11-19 12:27:04 +01:00
fingerprint
firewire	firewire: nosy: ensure user_length is taken into account when fetching packet contents	2024-11-19 11:32:46 +01:00
firmware	firmware: arm_scpi: Check the DVFS OPP count returned by the firmware	2024-12-17 13:24:03 +01:00
fpga	fpga: region: add owner module and take its refcount	2024-11-19 12:27:04 +01:00
fsi
gnss
gpio	Revert "gpio: prevent potential speculation leaks in gpio_device_get_desc()"	2024-11-24 00:23:32 +01:00
gpu	drm/bridge: tc358768: Fix DSI command tx	2024-12-17 13:20:51 +01:00
greybus	greybus: Fix use-after-free bug in gb_interface_release due to race condition.	2024-11-19 14:19:05 +01:00
gud
hid	HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad	2024-11-30 02:33:27 +01:00
hsi
hv	Revert "Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic"	2024-11-24 00:23:37 +01:00
hwmon	Revert "hwmon: (adc128d818) Fix underflows seen when writing limit attributes"	2024-11-24 00:23:40 +01:00
hwspinlock	Revert "hwspinlock: Introduce hwspin_lock_bust()"	2024-11-24 00:23:48 +01:00
hwtracing	Revert "coresight: tmc: sg: Do not leak sg_table"	2024-11-24 00:23:19 +01:00
i2c	Revert "i2c: Add i2c_get_match_data()"	2024-11-24 00:23:27 +01:00
i3c
ide
idle
ifconn
iio	Revert "iio: buffer-dmaengine: fix releasing dma channel on error"	2024-11-24 00:23:38 +01:00
infiniband	Revert "RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency"	2024-11-24 00:23:21 +01:00
input	Revert "Input: uinput - reject requests with unreasonable number of slots"	2024-11-24 00:23:39 +01:00
interconnect	Revert "interconnect: qcom: sm8250: Enable sync_state"	2024-11-24 00:23:19 +01:00
iommu	Revert "iommu: sun50i: clear bypass register"	2024-11-24 00:23:43 +01:00
ipack
irqchip	irqchip/gic-v3: Force propagation of the active state with a read-back	2024-11-30 02:33:26 +01:00
isdn	mISDN: Fix a use after free in hfcmulti_tx()	2024-11-23 23:20:17 +01:00
kperfmon
kq/mesh
leds	leds: lp55xx: Remove redundant test for invalid channel number	2024-12-17 13:20:50 +01:00
lightnvm
macintosh	macintosh/therm_windtunnel: fix module unload.	2024-11-23 23:20:11 +01:00
mailbox	Revert "mailbox: rockchip: fix a typo in module autoloading"	2024-11-24 00:23:13 +01:00
mcb
md	md/raid10: improve code of mrdev in raid10_sync_request	2024-11-30 02:33:28 +01:00
media	media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set	2024-12-17 13:20:51 +01:00
memory	memory: stm32-fmc2-ebi: check regmap_read return value	2024-11-23 23:20:46 +01:00
memstick
message
mfd	mfd: omap-usb-tll: Use struct_size to allocate tll	2024-11-23 23:20:09 +01:00
misc	drivers: samsung: scsc: Adapt scsc_wlbtd.c for Linux 5.10.229	2024-11-24 00:42:20 +01:00
mmc	mmc: mmc_spi: drop buggy snprintf()	2024-12-17 13:24:00 +01:00
most
mtd	Revert "mtd: slram: insert break after errors in parsing the map"	2024-11-24 00:23:27 +01:00
muic
mux
net	net: usb: qmi_wwan: add Quectel RG650V	2024-12-17 13:23:58 +01:00
nfc	nfc: pn533: Add poll mod list filling check	2024-11-23 23:20:55 +01:00
ntb	Revert "ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()"	2024-11-24 00:23:20 +01:00
nubus
nvdimm	Revert "virtio_pmem: Check device status before requesting flush"	2024-11-24 00:22:58 +01:00
nvme	nvme-pci: fix freeing of the HMB descriptor table	2024-12-17 13:23:59 +01:00
nvmem	Revert "nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc"	2024-11-24 00:23:38 +01:00
of	Revert "of/irq: Prevent device address out-of-bounds read in interrupt map walk"	2024-11-24 00:23:38 +01:00
opp	OPP: debugfs: Fix warning around icc_get_name()	2024-11-19 08:44:49 +01:00
oprofile
parisc
parport	Revert "parport: Proper fix for array out-of-bounds access"	2024-11-24 00:22:51 +01:00
pci	Revert "PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)"	2024-11-24 00:23:42 +01:00
pcmcia	Revert "pcmcia: Use resource_size function on resource object"	2024-11-24 00:23:42 +01:00
perf
phy	phy: tegra: xusb: Add API to retrieve the port number of phy	2024-11-19 09:22:34 +01:00
pinctrl	Revert "pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins"	2024-11-24 00:23:50 +01:00
platform	platform/x86: touchscreen_dmi: add nanote-next quirk	2024-11-23 23:21:40 +01:00
pnp
power	Revert "power: supply: axp20x_battery: allow disabling battery charging"	2024-11-24 00:23:27 +01:00
powercap	Revert "powercap: RAPL: fix invalid initialization for pl4_supported field"	2024-11-24 00:23:18 +01:00
pps	Revert "pps: remove usage of the deprecated ida_simple_xx() API"	2024-11-24 00:23:14 +01:00
ps3
ptp	ptp: Fix error message on failed pin verification	2024-11-19 14:19:01 +01:00
pwm	pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle	2024-12-17 13:24:02 +01:00
rapidio
ras
regulator	regulator: rk808: Add apply_bit for BUCK3 on RK809	2024-12-17 13:23:58 +01:00
remoteproc	remoteproc: imx_rproc: Skip over memory region when node value is NULL	2024-11-23 23:20:20 +01:00
reset	Revert "reset: berlin: fix OF node leak in probe() error path"	2024-11-24 00:23:27 +01:00
rpmsg
rtc	Revert "rtc: at91sam9: fix OF node leak in probe() error path"	2024-11-24 00:23:01 +01:00
s390	Revert "s390/zcore: no need to check return value of debugfs_create functions"	2024-11-24 00:22:59 +01:00
samsung
sbus
scsi	scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer	2024-11-30 02:33:23 +01:00
sensorhub
sensors
sfi
sh
siox
slimbus	slimbus: core: Remove usage of the deprecated ida_simple_xx() API	2024-11-19 09:22:34 +01:00
soc	pmdomain: ti-sci: Add missing of_node_put() for args.np	2024-12-17 13:24:03 +01:00
soundwire	Revert "soundwire: stream: fix programming slave ports for non-continous port maps"	2024-11-24 00:23:49 +01:00
spi	spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()	2024-12-17 13:24:00 +01:00
spmi
spu_verify
ssb	ssb: Fix division by zero issue in ssb_calc_clock_rate	2024-11-23 23:20:44 +01:00
staging	clkdev: remove CONFIG_CLKDEV_LOOKUP	2024-12-17 13:24:00 +01:00
sti
target	scsi: target: core: Fix null-ptr-deref in target_alloc_device()	2024-11-23 23:21:59 +01:00
tc
tee	tee: optee: Fix kernel panic caused by incorrect error handling	2024-11-19 09:22:39 +01:00
thermal
thunderbolt	thunderbolt: Mark XDomain as unplugged when router is removed	2024-11-23 23:20:42 +01:00
tty	Revert "tty: rp2: Fix reset with non forgiving PCIe host bridges"	2024-11-24 00:23:16 +01:00
uh
uio	Revert "uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind"	2024-11-24 00:23:37 +01:00
usb	USB: serial: option: add Quectel RG650V	2024-11-30 02:33:26 +01:00
vdpa	vdpa/mlx5: Fix PA offset with unaligned starting iotlb map	2024-12-17 13:20:50 +01:00
vfio	vfio/fsl-mc: Block calling interrupt handler without trigger	2024-11-19 09:22:45 +01:00
vhost	Revert "vdpa: Add eventfd for the vdpa callback"	2024-11-24 00:23:19 +01:00
vibrator
video	Revert "fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()"	2024-11-24 00:23:26 +01:00
virt
virtio	Revert "vdpa: Add eventfd for the vdpa callback"	2024-11-24 00:23:19 +01:00
vision
vision3
visorbus
vlynq
vme
w1
watchdog	Revert "watchdog: s3c2410_wdt: Assign s3c_wdt[] until probe complete"	2024-12-03 19:58:09 +01:00
xen	Revert "xen/swiotlb: add alignment check for dma buffers"	2024-11-24 00:23:24 +01:00
zorro
Kconfig	Added KernelSU	2024-11-19 22:44:48 +01:00
Kconfig.variant1
kernelsu	Added KernelSU	2024-11-19 22:44:48 +01:00
Makefile	Added KernelSU	2024-11-19 22:44:48 +01:00
Makefile.variant1