Javier Martinez Canillas f6ee30407e drm: Prevent drm_copy_field() to attempt copying a NULL pointer ... There are some struct drm_driver fields that are required by drivers since drm_copy_field() attempts to copy them to user-space via DRM_IOCTL_VERSION. But it can be possible that a driver has a bug and did not set some of the fields, which leads to drm_copy_field() attempting to copy a NULL pointer: [ +10.395966] Unable to handle kernel access to user memory outside uaccess routines at virtual address 0000000000000000 [ +0.010955] Mem abort info: [ +0.002835] ESR = 0x0000000096000004 [ +0.003872] EC = 0x25: DABT (current EL), IL = 32 bits [ +0.005395] SET = 0, FnV = 0 [ +0.003113] EA = 0, S1PTW = 0 [ +0.003182] FSC = 0x04: level 0 translation fault [ +0.004964] Data abort info: [ +0.002919] ISV = 0, ISS = 0x00000004 [ +0.003886] CM = 0, WnR = 0 [ +0.003040] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000115dad000 [ +0.006536] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000 [ +0.006925] Internal error: Oops: 96000004 [#1] SMP ... [ +0.011113] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ +0.007061] pc : __pi_strlen+0x14/0x150 [ +0.003895] lr : drm_copy_field+0x30/0x1a4 [ +0.004156] sp : ffff8000094b3a50 [ +0.003355] x29: ffff8000094b3a50 x28: ffff8000094b3b70 x27: 0000000000000040 [ +0.007242] x26: ffff443743c2ba00 x25: 0000000000000000 x24: 0000000000000040 [ +0.007243] x23: ffff443743c2ba00 x22: ffff8000094b3b70 x21: 0000000000000000 [ +0.007241] x20: 0000000000000000 x19: ffff8000094b3b90 x18: 0000000000000000 [ +0.007241] x17: 0000000000000000 x16: 0000000000000000 x15: 0000aaab14b9af40 [ +0.007241] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ +0.007239] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa524ad67d4d8 [ +0.007242] x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : 6c6e6263606e7141 [ +0.007239] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ +0.007241] x2 : 0000000000000000 x1 : ffff8000094b3b90 x0 : 0000000000000000 [ +0.007240] Call trace: [ +0.002475] __pi_strlen+0x14/0x150 [ +0.003537] drm_version+0x84/0xac [ +0.003448] drm_ioctl_kernel+0xa8/0x16c [ +0.003975] drm_ioctl+0x270/0x580 [ +0.003448] __arm64_sys_ioctl+0xb8/0xfc [ +0.003978] invoke_syscall+0x78/0x100 [ +0.003799] el0_svc_common.constprop.0+0x4c/0xf4 [ +0.004767] do_el0_svc+0x38/0x4c [ +0.003357] el0_svc+0x34/0x100 [ +0.003185] el0t_64_sync_handler+0x11c/0x150 [ +0.004418] el0t_64_sync+0x190/0x194 [ +0.003716] Code: 92402c04 b200c3e8 f13fc09f 5400088c (a9400c02) [ +0.006180] ---[ end trace 0000000000000000 ]--- Reported-by: Peter Robinson <pbrobinson@gmail.com> Signed-off-by: Javier Martinez Canillas <javierm@redhat.com> Acked-by: Thomas Zimmermann <tzimmermann@suse.de> Link: https://patchwork.freedesktop.org/patch/msgid/20220705100215.572498-3-javierm@redhat.com		2022-07-15 10:25:36 +02:00
..
accessibility	Revert "speakup: Generate speakupmap.h automatically"	2022-05-20 21:07:05 +02:00
acpi	ACPI: CPPC: Don't require _OSC if X86_FEATURE_CPPC is supported	2022-07-05 20:36:11 +02:00
amba	Driver core changes for 5.19-rc1	2022-06-03 11:48:47 -07:00
android	fix for breakage in #work.fd this window	2022-06-05 17:14:03 -07:00
ata	ata: pata_cs5535: Fix W=1 warnings	2022-06-30 08:21:43 +09:00
atm
auxdisplay
base	PM: runtime: Fix supplier device management during consumer probe	2022-07-01 21:04:15 +02:00
bcma
block	xen/blkfront: force data bouncing when backend is untrusted	2022-07-01 10:00:50 +02:00
bluetooth	Bluetooth: btmtksdio: fix the reset takes too long	2022-05-13 13:19:01 +02:00
bus	ARM: SoC fixes for 5.19	2022-06-26 14:12:56 -07:00
cdrom	cdrom: remove obsolete TODO list	2022-05-15 18:31:28 -06:00
char	Linux 5.19-rc6	2022-07-13 10:54:56 +10:00
clk	clk: stm32: rcc_reset: Fix missing spin_lock_init()	2022-06-09 15:34:08 -07:00
clocksource	clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()	2022-06-08 12:27:08 +00:00
comedi	comedi: vmk80xx: fix expression for tx buffer size	2022-06-10 15:21:23 +02:00
connector
counter
cpufreq	cpufreq arm fixes for 5.19-rc5	2022-06-28 17:56:57 +02:00
cpuidle	Merge branches 'pm-em' and 'pm-cpuidle'	2022-05-23 19:18:51 +02:00
crypto	crypto: s390 - do not depend on CRYPTO_HW for SIMD implementations	2022-07-06 20:04:06 -07:00
cxl	cxl/mbox: Fix missing variable payload checks in cmd size validation	2022-06-28 22:03:18 -07:00
dax	dax: add .recovery_write dax_operation	2022-05-16 13:37:59 -07:00
dca
devfreq	PM / devfreq: exynos-bus: Fix NULL pointer dereference	2022-07-08 04:32:26 +09:00
dio	drivers: dio: add missing iounmap() in dio_init()	2022-05-19 18:56:51 +02:00
dma	dmaengine: lgm: Fix an error handling path in intel_ldma_probe()	2022-07-06 10:53:25 +05:30
dma-buf	Merge drm/drm-next into drm-misc-next	2022-07-13 10:33:00 +02:00
edac	- A gargen variety of fixes which don't fit any other tip bucket:	2022-05-23 19:32:59 -07:00
eisa
extcon	extcon: Modify extcon device to be created after driver data is set	2022-05-13 17:03:41 +09:00
firewire	firewire: convert sysfs sprintf/snprintf family to sysfs_emit	2022-06-17 10:43:20 +02:00
firmware	ARM: SoC fixes for v5.19, part 2	2022-07-04 10:41:59 -07:00
fpga
fsi
gnss
gpio	gpiolib: cdev: fix null pointer dereference in linereq_free()	2022-07-07 12:18:18 +02:00
gpu	drm: Prevent drm_copy_field() to attempt copying a NULL pointer	2022-07-15 10:25:36 +02:00
greybus
hid	HID: hyperv: Correctly access fields declared as __le16	2022-06-08 12:28:13 +00:00
hsi
hte	hte: Uninitialized variable in hte_ts_get()	2022-05-20 15:54:41 +02:00
hv	Drivers: hv: vmbus: Release cpu lock in error case	2022-06-10 08:41:28 +00:00
hwmon	hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails	2022-07-01 11:53:29 -07:00
hwspinlock
hwtracing
i2c	i2c: cadence: Unregister the clk notifier in error path	2022-07-07 23:06:34 +02:00
i3c	i3c: master: svc: fix returnvar.cocci warning	2022-05-17 22:34:42 +02:00
idle	cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE	2022-06-08 18:05:45 +02:00
iio	1st set of IIO fixes for the 5.19 cycle.	2022-06-20 09:49:52 +02:00
infiniband	RDMA/cm: Fix memory leak in ib_cm_insert_listen	2022-06-24 16:41:03 -03:00
input	Input updates for v5.19-rc1	2022-06-07 15:00:29 -07:00
interconnect	Char / Misc / Other smaller driver subsystem updates for 5.19-rc1	2022-06-03 11:36:34 -07:00
iommu	iommu/vt-d: Fix RID2PASID setup/teardown failure	2022-07-06 12:59:21 +02:00
ipack
irqchip	IRQ urgent fixes by way of Marc Zygnier:	2022-07-10 08:52:12 -07:00
isdn
leds	ARM: multiplatform changes, part 2	2022-06-02 15:23:54 -07:00
macintosh	macintosh: via-pmu and via-cuda need RTC_LIB	2022-05-22 15:58:30 +10:00
mailbox	mailbox: qcom-ipcc: Fix -Wunused-function with CONFIG_PM_SLEEP=n	2022-05-24 08:08:24 -05:00
mcb
md	dm raid: fix KASAN warning in raid5_add_disks	2022-06-29 19:48:04 -04:00
media	USB / Thunderbolt changes for 5.19-rc1	2022-06-03 11:17:49 -07:00
memory	memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings	2022-06-06 11:18:20 +02:00
memstick
message
mfd	ARM: multiplatform changes, part 2	2022-06-02 15:23:54 -07:00
misc	misc: rtsx_usb: set return value in rsp_buf alloc err path	2022-07-02 16:20:56 +02:00
mmc	mmc: mediatek: wait dma stop bit reset to 0	2022-06-15 10:05:56 -07:00
most
mtd	mtd: rawnand: gpmi: Fix setting busy timeout setting	2022-06-16 16:46:08 +02:00
mux
net	Networking fixes for 5.19-rc6, including fixes from bpf, netfilter,	2022-07-07 10:08:20 -07:00
nfc	NFC: nxp-nci: don't print header length mismatch on i2c error	2022-06-29 14:05:00 +01:00
ntb
nubus
nvdimm	nvdimm: Fix badblocks clear off-by-one error	2022-06-24 11:57:19 -07:00
nvme	nvme: use struct group for generic command dwords	2022-07-06 19:12:56 +02:00
nvmem
of	drm for 5.19-rc1	2022-05-25 16:18:27 -07:00
opp	OPP updates for 5.19-rc1	2022-05-25 15:02:26 +02:00
parisc
parport
pci	Driver core changes for 5.19-rc1	2022-06-03 11:48:47 -07:00
pcmcia	ARM: multiplatform changes, part 2	2022-06-02 15:23:54 -07:00
peci
perf	arm64 updates for 5.19:	2022-05-23 21:06:11 -07:00
phy	phy-for-5.19	2022-05-19 16:56:17 +02:00
pinctrl	pinctrl: stm32: fix optional IRQ support to gpios	2022-06-28 16:12:40 +02:00
platform	platform-drivers-x86 for v5.19-3	2022-06-29 09:32:06 -07:00
pnp
power	Char / Misc / Other smaller driver subsystem updates for 5.19-rc1	2022-06-03 11:36:34 -07:00
powercap	Merge branches 'pm-em' and 'pm-cpuidle'	2022-05-23 19:18:51 +02:00
pps
ps3
ptp	ptp: ptp_clockmatrix: fix is_single_shot	2022-05-25 21:51:32 -07:00
pwm	pwm: pwm-cros-ec: Add channel type support	2022-05-20 16:40:01 +02:00
rapidio
ras
regulator	regulator: qcom_smd: correct MP5496 ranges	2022-06-07 20:38:09 +01:00
remoteproc
reset
rpmsg	Driver core changes for 5.19-rc1	2022-06-03 11:48:47 -07:00
rtc	ARM: multiplatform changes, part 2	2022-06-02 15:23:54 -07:00
s390	s390 updates for 5.19-rc5	2022-07-01 11:19:14 -07:00
sbus
scsi	scsi: hisi_sas: Limit max hw sectors for v3 HW	2022-06-27 22:43:57 -04:00
sh
siox
slimbus	Driver core changes for 5.19-rc1	2022-06-03 11:48:47 -07:00
soc	soc: qcom: smem: use correct format characters	2022-07-04 14:26:51 +02:00
soundwire
spi	spi: rockchip: Unmask IRQ at the final to avoid preemption	2022-06-20 11:35:43 +01:00
spmi
ssb
staging	staging/wlan-ng: get the correct struct hfa384x in work callback	2022-07-01 09:58:58 +02:00
target	blk-mq: remove the done argument to blk_execute_rq_nowait	2022-05-28 06:15:27 -06:00
tc
tee	Fix a compiler warning in OP-TEE driver	2022-05-30 14:44:27 +02:00
thermal	Thermal control update for 5.19-rc5	2022-07-01 13:00:47 -07:00
thunderbolt	USB / Thunderbolt changes for 5.19-rc1	2022-06-03 11:17:49 -07:00
tty	Merge branch 'rework/kthreads' into for-linus	2022-06-23 19:11:28 +02:00
ufs	scsi: ufs: Fix a race between the interrupt handler and the reset handler	2022-06-16 21:32:09 -04:00
uio
usb	usb: chipidea: udc: check request status before setting device address	2022-06-24 13:45:23 +02:00
vdpa	vduse: Tie vduse mgmtdev and its device	2022-06-24 02:49:48 -04:00
vfio	vfio/pci: Remove console drivers	2022-06-27 11:10:32 +02:00
vhost	vhost-vdpa: call vhost_vdpa_cleanup during the release	2022-06-27 08:05:35 -04:00
video	Linux 5.19-rc6	2022-07-13 10:54:56 +10:00
virt	Char / Misc / Other smaller driver subsystem updates for 5.19-rc1	2022-06-03 11:36:34 -07:00
virtio	virtio_ring: make vring_create_virtqueue_split prettier	2022-06-27 08:05:35 -04:00
vlynq
vme
w1
watchdog	watchdog: gxp: Add missing MODULE_LICENSE	2022-06-09 12:20:34 +02:00
xen	xen/gntdev: Avoid blocking in unmap_grant_pages()	2022-06-23 15:29:18 +02:00
zorro
Kconfig	SCSI misc on 20220604	2022-06-05 09:25:12 -07:00
Makefile	SCSI misc on 20220604	2022-06-05 09:25:12 -07:00