1. Feb 18, 2022
  2. Feb 17, 2022
  3. Feb 08, 2022
    • Zhou Qingyang's avatar
      spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() · ab382442
      Zhou Qingyang authored
      In zynq_qspi_exec_mem_op(), kzalloc() is directly used in memset(),
      which could lead to a NULL pointer dereference on failure of
      kzalloc().
      
      Fix this bug by adding a check of tmpbuf.
      
      This bug was found by a static analyzer. The analysis employs
      differential checking to identify inconsistent security operations
      (e.g., checks or kfrees) between two code paths and confirms that the
      inconsistent operations are not recovered in the current function or
      the callers, so they constitute bugs.
      
      Note that, as a bug found by static analysis, it can be a false
      positive or hard to trigger. Multiple researchers have cross-reviewed
      the bug.
      
      Builds with CONFIG_SPI_ZYNQ_QSPI=m show no new warnings,
      and our static analyzer no longer warns about this code.
      
      Fixes: 67dca5e5
      
       ("spi: spi-mem: Add support for Zynq QSPI controller")
      Signed-off-by: default avatarZhou Qingyang <zhou1615@umn.edu>
      Link: https://lore.kernel.org/r/20211130172253.203700-1-zhou1615@umn.edu
      
      
      Signed-off-by: default avatarMark Brown <broonie@kernel.org>
      ab382442
  4. Jan 31, 2022
  5. Jan 28, 2022
  6. Jan 26, 2022
  7. Jan 24, 2022
  8. Jan 20, 2022
  9. Jan 08, 2022
  10. Jan 07, 2022
  11. Jan 06, 2022
  12. Jan 04, 2022
  13. Dec 23, 2021
  14. Dec 22, 2021
  15. Dec 21, 2021
  16. Dec 16, 2021
  17. Dec 14, 2021
  18. Dec 01, 2021
  19. Nov 29, 2021