Johan Hovold 9872ff6fdc staging: greybus: uart: fix tty use after free ...

commit 92dc0b1f46 upstream.

User space can hold a tty open indefinitely and tty drivers must not
release the underlying structures until the last user is gone.

Switch to using the tty-port reference counter to manage the life time
of the greybus tty state to avoid use after free after a disconnect.

Fixes: a18e151757 ("greybus: more uart work")
Cc: stable@vger.kernel.org      # 4.9
Reviewed-by: Alex Elder <elder@linaro.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Link: https://lore.kernel.org/r/20210906124538.22358-1-johan@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-09-30 10:12:54 +02:00

..

Documentation

…

tools

…

arche_platform.h

…

arche-apb-ctrl.c

…

arche-platform.c

staging: greybus: arche-platform: Ending line with argument

2021-04-02 14:56:34 +02:00

audio_apbridgea.c

…

audio_apbridgea.h

…

audio_codec.c

staging: greybus: codecs: Fix reference counter leak in error handling

2020-11-13 15:34:07 +01:00

audio_codec.h

staging: greybus: audio: Resolve compilation errors for GB codec module

2020-07-29 16:40:09 +02:00

audio_gb.c

…

audio_helper.c

staging: greybus: Switch from strlcpy to strscpy

2021-02-04 17:16:06 +01:00

audio_helper.h

staging: greybus: audio: Add helper APIs for dynamic audio modules

2020-07-29 16:40:09 +02:00

audio_manager_module.c

staging: greybus: audio: code indentation and formatting changes

2020-10-26 06:53:10 +01:00

audio_manager_private.h

…

audio_manager_sysfs.c

staging: greybus: minor code style fix

2021-02-13 22:37:50 +01:00

audio_manager.c

…

audio_manager.h

…

audio_module.c

staging/greybus: eliminate use of NAME_SIZE for strings

2021-03-10 09:25:33 +01:00

audio_topology.c

staging: greybus: audio: Fix sparse warning.

2021-05-20 11:39:26 +02:00

authentication.c

…

bootrom.c

…

camera.c

staging: greybus: camera: Switch to memdup_user_nul()

2021-04-02 14:56:38 +02:00

firmware.h

…

fw-core.c

…

fw-download.c

…

fw-management.c

…

gb-camera.h

…

gbphy.c

Staging: greybus: fix open parenthesis error in gbphy.c

2021-05-20 11:40:33 +02:00

gbphy.h

staging: greybus: Add identifier name to function definition argument

2020-08-18 16:07:17 +02:00

gpio.c

staging: greybus: gpio: Use irqchip template

2020-07-28 10:05:33 +02:00

greybus_authentication.h

…

greybus_firmware.h

…

hid.c

staging: greybus: Fixed a misspelling in hid.c

2021-02-13 22:37:51 +01:00

i2c.c

…

Kconfig

staging: greybus: audio: Enable GB codec, audio module compilation.

2020-07-29 16:40:26 +02:00

light.c

staging: greybus: light: Use kzalloc for allocating only one thing

2021-01-05 15:26:43 +01:00

log.c

…

loopback.c

staging: greybus: loopback: fix a spelling error.

2020-05-27 10:18:09 +02:00

Makefile

staging: greybus: audio: Enable GB codec, audio module compilation.

2020-07-29 16:40:26 +02:00

power_supply.c

staging: greybus: Switch from strlcpy to strscpy

2021-02-04 17:16:06 +01:00

pwm.c

…

raw.c

…

sdio.c

staging: greybus: Fix blank line style issue in sdio.c

2021-03-10 09:25:26 +01:00

spi.c

…

spilib.c

staging: greybus: spi: add blank line after variable declaration

2021-05-20 11:40:36 +02:00

spilib.h

…

TODO

staging: greybus: Add TODO item about modernizing the pwm code

2020-12-09 15:49:04 +01:00

uart.c

staging: greybus: uart: fix tty use after free

2021-09-30 10:12:54 +02:00

usb.c

…

vibrator.c

…