RE: [PATCH v3] cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer

2019-02-28 Thread liujian (CE)
> -Original Message- > From: Tokunori Ikegami [mailto:ikegam...@gmail.com] > Sent: Thursday, February 28, 2019 10:26 PM > To: liujian (CE) ; dw...@infradead.org; > computersforpe...@gmail.com; bbrezil...@kernel.org; > marek.va...@gmail.com; rich...@nod.at; joakim.tjer

RE: [PATCH v2] cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer

2019-02-22 Thread liujian (CE)
> -Original Message- > From: Vignesh R [mailto:vigne...@ti.com] > Sent: Friday, February 22, 2019 1:59 PM > To: liujian (CE) ; dw...@infradead.org; > computersforpe...@gmail.com; bbrezil...@kernel.org; > marek.va...@gmail.com; rich...@nod.at; joakim.tjernl...@in

RE: Re: [PATCH] cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer

2019-02-13 Thread liujian (CE)
Best Regards, liujian > -Original Message- > From: Tokunori Ikegami [mailto:ikegam...@gmail.com] > Sent: Friday, February 08, 2019 10:24 PM > To: 'Sobon, Przemyslaw' ; 'Boris Brezillon' > > Cc: keesc...@chromium.org; marek.va...@gma

RE: [PATCH v5] driver: uio: fix possible memory leak in uio_open

2019-01-31 Thread liujian (CE)
> -Original Message- > From: Greg KH [mailto:gre...@linuxfoundation.org] > Sent: Thursday, January 31, 2019 11:36 PM > To: liujian (CE) > Cc: xiu...@redhat.com; linux-kernel@vger.kernel.org > Subject: Re: [PATCH v5] driver: uio: fix possible memory leak in uio_open &

RE: [PATCH v3] driver: uio: fix possible memory leak in uio_open

2019-01-07 Thread liujian (CE)
> -Original Message- > From: Greg KH [mailto:gre...@linuxfoundation.org] > Sent: Tuesday, January 08, 2019 12:14 AM > To: liujian (CE) > Cc: xiu...@redhat.com; linux-kernel@vger.kernel.org > Subject: Re: [PATCH v3] driver: uio: fix possible memory leak in uio_open &

RE: [PATCH v2] driver: uio: fix possible memory leak and use-after-free in __uio_register_device

2019-01-07 Thread liujian (CE)
> -Original Message- > From: Greg KH [mailto:gre...@linuxfoundation.org] > Sent: Tuesday, January 08, 2019 12:13 AM > To: liujian (CE) > Cc: michal.si...@xilinx.com; hamish.mar...@alliedtelesis.co.nz; > linux-kernel@vger.kernel.org > Subject: Re: [PATCH v2] driv

[PATCH v2] driver: uio: fix possible memory leak and use-after-free in __uio_register_device

2019-01-03 Thread liujian
ed, touch idev cause use-after-free. Fixes: a93e7b331568 ("uio: Prevent device destruction while fds are open") Fixes: e6789cd3dfb5 ("uio: Simplify uio error path by using devres functions") Signed-off-by: liujian --- v1->v2: change git log and fix code drivers/uio/uio.c |

[PATCH v3] driver: uio: fix possible memory leak in uio_open

2019-01-02 Thread liujian
Fixes: 57c5f4df0a5a ("uio: fix crash after the device is unregistered") Signed-off-by: liujian --- v1->v2: rename the "err_infoopen" to "err_idev_info" v2->3: put the extra info after the "--" drivers/uio/uio.c | 7 --- 1 file changed, 4 inser

[PATCH v2] driver: uio: fix possible memory leak in uio_open

2019-01-02 Thread liujian
v1->v2: rename the "err_infoopen" to "err_idev_info" Fixes: 57c5f4df0a5a ("uio: fix crash after the device is unregistered") Signed-off-by: liujian --- drivers/uio/uio.c | 7 --- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/drivers/ui

RE: [PATCH] driver: uio: fix possible memory leak in uio_open

2019-01-01 Thread liujian (CE)
> -Original Message- > From: linux-kernel-ow...@vger.kernel.org > [mailto:linux-kernel-ow...@vger.kernel.org] On Behalf Of Xiubo Li > Sent: Wednesday, January 02, 2019 2:37 PM > To: liujian (CE) > Cc: gre...@linuxfoundation.org; linux-kernel@vger.kernel.org >

[PATCH] driver: uio: fix possible memory leak in uio_open

2019-01-01 Thread liujian
Fixes: 57c5f4df0a5a ("uio: fix crash after the device is unregistered") Signed-off-by: liujian --- drivers/uio/uio.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/uio/uio.c b/drivers/uio/uio.c index 5c10fc7..bde7d7a 100644 --- a/drivers/uio/uio.c +++ b/d

[PATCH] driver: uio: fix possible memory leak and use-after-free in __uio_register_device

2019-01-01 Thread liujian
Before device_register, if something goes wrong, we need to manually free idev. In the error handling path, after device_unregister, idev maybe have been released, we should not use it anymore. Signed-off-by: liujian --- drivers/uio/uio.c | 25 +++-- 1 file changed, 19

RE: [PATCH] driver: input: fix UBSAN warning in input_defuzz_abs_event

2018-11-19 Thread liujian (CE)
Best Regards, liujian > -Original Message- > From: Dmitry Torokhov [mailto:dmitry.torok...@gmail.com] > Sent: Tuesday, November 13, 2018 3:49 AM > To: liujian (CE) > Cc: linux-in...@vger.kernel.org; linux-kernel@vger.kernel.org > Subject: Re: [PATCH] driver: input:

[PATCH] driver: input: fix UBSAN warning in input_defuzz_abs_event

2018-11-01 Thread liujian
'/dev/input/event#\x00', 0x2, 0x200) syz_open_dev$evdev(&(0x7f000100)='/dev/input/event#\x00', 0x2, 0x1) syz_open_dev$evdev(&(0x7f000100)='/dev/input/event#\x00', 0x2, 0x1) syz_open_dev$evdev(&(0x7f000100)='/dev/input/event#\x00', 0x2, 0

RE: af_packet: use after free in prb_retire_rx_blk_timer_expired

2017-07-24 Thread liujian (CE)
Hi Wang cong, After apply the patch, I did not hit the issue again. Thank you~ Best Regards, liujian > -Original Message- > From: Dingtianhong > Sent: Monday, July 24, 2017 9:29 AM > To: Cong Wang; liujian (CE) > Cc: Willem de Bruijn; Dave Jones; alexander.le...@ve

RE: af_packet: use after free in prb_retire_rx_blk_timer_expired

2017-07-23 Thread liujian (CE)
Hi I find it caused by below steps: 1. set tp_version to TPACKET_V3 and req->tp_block_nr to 1 2. set tp_block_nr to 0 Then pg_vec was freed, and we did not delete the timer? Best Regards, liujian > -Original Message- > From: liujian (CE) > Sent: Sunday, July 23, 2017

RE: af_packet: use after free in prb_retire_rx_blk_timer_expired

2017-07-23 Thread liujian (CE)
Hi, Do we need delete the v3 ring, when tp_version changed from TPACKET_V3 to TPACKET_V1 ? Best Regards, liujian > -Original Message- > From: liujian (CE) > Sent: Sunday, July 23, 2017 4:21 PM > To: 'Cong Wang'; Dingtianhong > Cc: Willem de Bruijn;

RE: af_packet: use after free in prb_retire_rx_blk_timer_expired

2017-07-23 Thread liujian (CE)
001fd6b60 R15: 01fd6b70 ORIG_RAX: 0036 CS: 0033 SS: 002b Best Regards, liujian > -Original Message- > From: Cong Wang [mailto:xiyou.wangc...@gmail.com] > Sent: Sunday, July 23, 2017 1:59 PM > To: Dingtianhong > Cc: liujian (CE); Willem de Brui

RE: af_packet: use after free in prb_retire_rx_blk_timer_expired

2017-07-22 Thread liujian (CE)
, blk_fill_in_prog = { counter = 0x0 crash> struct pgv 0x8801b31057a0 struct pgv { buffer = 0xa56b6b6b6b6b6b6b } Best Regards, liujian > -Original Message- > From: netdev-ow...@vger.kernel.org [mailto:netdev-ow...@vger.kernel.org] > On Behalf Of Willem