linux-toradex.git/drivers/misc/mei/main.c, branch v4.5

mei: validate request value in client notify request ioctl

2016-02-07T06:12:56+00:00

This patch address a possible security issue:

The request field in client notify request ioctl comes from user space
as u32 and is downcasted to u8 with out validation.
Check request field to have approved values
MEI_HBM_NOTIFICATION_STAR/STOP

Cc:  #4.3+
Signed-off-by: Alexander Usyskin 
Signed-off-by: Tomas Winkler 
Signed-off-by: Greg Kroah-Hartman

mei: fix fasync return value on error

2016-01-08T01:03:43+00:00

fasync should return a negative value on error
and not poll mask POLLERR.

Cc:  # 4.3+
Cc: Al Viro 
Reported-by: Al Viro 
Signed-off-by: Tomas Winkler 
Signed-off-by: Greg Kroah-Hartman

mei: implement fasync for event notification

2015-08-04T00:30:00+00:00

A process can be informed about client notification also via
SIGIO with POLL_PRI event.

Signed-off-by: Tomas Winkler 
Signed-off-by: Greg Kroah-Hartman

mei: support polling for event notification

2015-08-04T00:30:00+00:00

Polling on priority events is translated on waiting for event
notification. One need to enable notification prior for
calling select or poll system call otherwise process
will not wait.

Signed-off-by: Tomas Winkler 
Signed-off-by: Alexander Usyskin 
Signed-off-by: Greg Kroah-Hartman

mei: add async event notification ioctls

2015-08-04T00:30:00+00:00

Add ioctl IOCTL_MEI_NOTIFY_SET for enabling and disabling
async event notification.
Add ioctl IOCTL_MEI_NOTIFY_GET for receiving and acking
an event notification.

Signed-off-by: Tomas Winkler 
Signed-off-by: Alexander Usyskin 
Signed-off-by: Greg Kroah-Hartman

mei: prevent unloading mei hw modules while the device is opened.

2015-07-23T04:31:05+00:00

chrdev_open() increases reference counter on cdev->owner. Instead of
assigning the owner to mei subsystem, the owner has to be set to the
underlaying HW module (mei_me or mei_txe), so once the device is opened
the HW module cannot be unloaded.

Cc:  #3.17+
Signed-off-by: Tomas Winkler 
Signed-off-by: Alexander Usyskin 
Signed-off-by: Greg Kroah-Hartman

mei: debug prints with client info in read

2015-05-24T18:13:49+00:00

Add client info to debug prints in the read function to
ease on debugging efforts.

Signed-off-by: Alexander Usyskin 
Signed-off-by: Tomas Winkler 
Signed-off-by: Greg Kroah-Hartman

mei: connection to fixed address clients from user-space

2015-05-24T18:13:48+00:00

This should be used for debug only.
The feaure is gated by "allow_fixed_address" control exposed in debugfs.

Signed-off-by: Alexander Usyskin 
Signed-off-by: Tomas Winkler 
Signed-off-by: Greg Kroah-Hartman

mei: add a reference from the host client to the me client

2015-05-24T18:13:10+00:00

Keep a pointer to associated me client in the host client object to
eliminate me client searches. Check if the me client is active in the
firmware by checking if its is linked on the me clients list
Add accessors for the me client properties from host client.

Signed-off-by: Alexander Usyskin 
Signed-off-by: Tomas Winkler 
Signed-off-by: Greg Kroah-Hartman

mei: revamp client disconnection flow

2015-05-24T18:13:10+00:00

Split disconnected state into two parts first reception disconnect
response from the firmware and second actually setting of disconnected
state.  Book keeping data are needed for processing and after firmware
disconnected the client and are cleaned when setting the disconnected
state in mei_cl_set_disconneted() function.
Add mei_cl_send_disconnect to reduce code duplication.

Signed-off-by: Tomas Winkler 
Signed-off-by: Alexander Usyskin 
Signed-off-by: Greg Kroah-Hartman