linux-toradex.git, branch v3.3.7

Linux 3.3.7

2012-05-21T18:42:51+00:00

Avoid reading past buffer when calling GETACL

2012-05-21T17:46:24+00:00

commit 5a00689930ab975fdd1b37b034475017e460cf2a upstream.

Bug noticed in commit
bf118a342f10dafe44b14451a1392c3254629a1f

When calling GETACL, if the size of the bitmap array, the length
attribute and the acl returned by the server is greater than the
allocated buffer(args.acl_len), we can Oops with a General Protection
fault at _copy_from_pages() when we attempt to read past the pages
allocated.

This patch allocates an extra PAGE for the bitmap and checks to see that
the bitmap + attribute_length + ACLs don't exceed the buffer space
allocated to it.

Signed-off-by: Sachin Prabhu 
Reported-by: Jian Li 
[Trond: Fixed a size_t vs unsigned int printk() warning]
Signed-off-by: Trond Myklebust 
Signed-off-by: Greg Kroah-Hartman

Avoid beyond bounds copy while caching ACL

2012-05-21T17:46:24+00:00

commit 5794d21ef4639f0e33440927bb903f9598c21e92 upstream.

When attempting to cache ACLs returned from the server, if the bitmap
size + the ACL size is greater than a PAGE_SIZE but the ACL size itself
is smaller than a PAGE_SIZE, we can read past the buffer page boundary.

Signed-off-by: Sachin Prabhu 
Reported-by: Jian Li 
Signed-off-by: Trond Myklebust 
Signed-off-by: Greg Kroah-Hartman

spi-topcliff-pch: add recovery processing in case wait-event timeout

2012-05-21T17:46:24+00:00

commit 0f57e168aa109775430c76cc663fb64909813d84 upstream.

Currently, pch_spi_start_transfer failure is not anticipated.
This patch adds the processing.

Signed-off-by: Tomoya MORINAGA 
Signed-off-by: Grant Likely 
Signed-off-by: Greg Kroah-Hartman

spi-topcliff-pch: supports a spi mode setup and bit order setup by IO control

2012-05-21T17:46:24+00:00

commit f258b44e22e07f5e98ac2260c70acff5784791b6 upstream.

This patch supports a spi mode setup and bit order setup by IO control.
    spi mode:     mode 0 to mode 3
    bit order:    LSB first, MSB first

Signed-off-by: Tomoya MORINAGA 
Signed-off-by: Grant Likely 
Signed-off-by: Greg Kroah-Hartman

spi-topcliff-pch: Fix issue for transmitting over 4KByte

2012-05-21T17:46:23+00:00

commit 7d05b3e868ee0f9231baf40cb77be3df5dd1f18c upstream.

Currently, when spi-topcliff-pch receives transmit request over 4KByte,
this driver can't process correctly. This driver needs to divide the data
into 4Kbyte unit.
This patch fixes the issue.

Signed-off-by: Tomoya MORINAGA 
Signed-off-by: Grant Likely 
Signed-off-by: Greg Kroah-Hartman

spi-topcliff-pch: Modify pci-bus number dynamically to get DMA device info

2012-05-21T17:46:23+00:00

commit ee2ece5261a639b89f194d141444b03b4c923179 upstream.

Signed-off-by: Tomoya MORINAGA 
Signed-off-by: Grant Likely 
Signed-off-by: Greg Kroah-Hartman

i2c-eg20t: change timeout value 50msec to 1000msec

2012-05-21T17:46:23+00:00

commit 8a52f9f347da721b199b7f9dcc0168bbe7d0baae upstream.

Currently, during i2c works alone, wait-event timeout is not occurred.
However, as CPU load increases, timeout occurs frequently.
So, I modified like this patch.
Modifying like this patch, I've never seen the timeout event with high
load test.

Signed-off-by: Tomoya MORINAGA 
Signed-off-by: Wolfram Sang 
Signed-off-by: Greg Kroah-Hartman

OMAPDSS: VENC: fix NULL pointer dereference in DSS2 VENC sysfs debug attr on OMAP4

2012-05-21T17:46:23+00:00

commit cc1d3e032df53d83d0ca4d537d8eb67eb5b3e808 upstream.

Commit ba02fa37de80bea10d706f39f076dd848348320a disabled the
venc driver registration on OMAP4. Since the driver never gets
probed/initialised your get a dereferenceed NULL pointer if you
try to get info from /sys/kernel/debug/omapdss/venc

Return info message about disabled venc if venc_dump_regs() gets called.

Signed-off-by: Danny Kukawka 
Signed-off-by: Tomi Valkeinen 
Signed-off-by: Greg Kroah-Hartman

dl2k: Clean up rio_ioctl

2012-05-21T17:46:23+00:00

commit 1bb57e940e1958e40d51f2078f50c3a96a9b2d75 upstream.

The dl2k driver's rio_ioctl call has a few issues:
- No permissions checking
- Implements SIOCGMIIREG and SIOCGMIIREG using the SIOCDEVPRIVATE numbers
- Has a few ioctls that may have been used for debugging at one point
  but have no place in the kernel proper.

This patch removes all but the MII ioctls, renumbers them to use the
standard ones, and adds the proper permission check for SIOCSMIIREG.

We can also get rid of the dl2k-specific struct mii_data in favor of
the generic struct mii_ioctl_data.

Since we have the phyid on hand, we can add the SIOCGMIIPHY ioctl too.

Most of the MII code for the driver could probably be converted to use
the generic MII library but I don't have a device to test the results.

Reported-by: Stephan Mueller 
Signed-off-by: Jeff Mahoney 
Signed-off-by: David S. Miller 
Signed-off-by: Greg Kroah-Hartman