Tetsuo Handa
4e772cfd1a
misc: vmw_vmci: explicitly initialize vmci_datagram payload
commit b2192cfeba8481224da0a4ec3b4a7ccd80b1623b upstream.
KMSAN complains that vmci_check_host_caps() left the payload part of
check_msg uninitialized.
=====================================================
BUG: KMSAN: uninit-value in kmsan_check_memory+0xd/0x10
CPU: 1 PID: 1 Comm: swapper/0 Tainted: G B 5.11.0-rc7+ #4
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 02/27/2020
Call Trace:
dump_stack+0x21c/0x280
kmsan_report+0xfb/0x1e0
kmsan_internal_check_memory+0x202/0x520
kmsan_check_memory+0xd/0x10
iowrite8_rep+0x86/0x380
vmci_guest_probe_device+0xf0b/0x1e70
pci_device_probe+0xab3/0xe70
really_probe+0xd16/0x24d0
driver_probe_device+0x29d/0x3a0
device_driver_attach+0x25a/0x490
__driver_attach+0x78c/0x840
bus_for_each_dev+0x210/0x340
driver_attach+0x89/0xb0
bus_add_driver+0x677/0xc40
driver_register+0x485/0x8e0
__pci_register_driver+0x1ff/0x350
vmci_guest_init+0x3e/0x41
vmci_drv_init+0x1d6/0x43f
do_one_initcall+0x39c/0x9a0
do_initcall_level+0x1d7/0x259
do_initcalls+0x127/0x1cb
do_basic_setup+0x33/0x36
kernel_init_freeable+0x29a/0x3ed
kernel_init+0x1f/0x840
ret_from_fork+0x1f/0x30
Uninit was created at:
kmsan_internal_poison_shadow+0x5c/0xf0
kmsan_slab_alloc+0x8d/0xe0
kmem_cache_alloc+0x84f/0xe30
vmci_guest_probe_device+0xd11/0x1e70
pci_device_probe+0xab3/0xe70
really_probe+0xd16/0x24d0
driver_probe_device+0x29d/0x3a0
device_driver_attach+0x25a/0x490
__driver_attach+0x78c/0x840
bus_for_each_dev+0x210/0x340
driver_attach+0x89/0xb0
bus_add_driver+0x677/0xc40
driver_register+0x485/0x8e0
__pci_register_driver+0x1ff/0x350
vmci_guest_init+0x3e/0x41
vmci_drv_init+0x1d6/0x43f
do_one_initcall+0x39c/0x9a0
do_initcall_level+0x1d7/0x259
do_initcalls+0x127/0x1cb
do_basic_setup+0x33/0x36
kernel_init_freeable+0x29a/0x3ed
kernel_init+0x1f/0x840
ret_from_fork+0x1f/0x30
Bytes 28-31 of 36 are uninitialized
Memory access of size 36 starts at ffff8881675e5f00
=====================================================
Fixes: 1f16643991 ("VMCI: guest side driver implementation.")
Cc: <stable@vger.kernel.org>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Link: https://lore.kernel.org/r/20210402121742.3917-2-penguin-kernel@I-love.SAKURA.ne.jp
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
2021-05-22 10:40:21 +02:00 |
| .. |
|
accessibility
|
|
|
|
acpi
|
ACPI: custom_method: fix a possible memory leak
|
2021-05-22 10:40:15 +02:00 |
|
amba
|
amba: Fix resource leak for drivers without .remove
|
2021-03-03 17:44:38 +01:00 |
|
android
|
binder: Prevent context manager from incrementing ref 0
|
2020-08-21 11:01:55 +02:00 |
|
ata
|
ata: ahci_brcm: Add back regulators management
|
2021-03-03 17:44:35 +01:00 |
|
atm
|
atm: idt77252: fix null-ptr-dereference
|
2021-03-30 14:41:39 +02:00 |
|
auxdisplay
|
|
|
|
base
|
Revert "device property: Keep secondary firmware node secondary by type"
|
2021-01-12 19:49:05 +01:00 |
|
bcma
|
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
|
2020-01-29 10:24:31 +01:00 |
|
block
|
xen-blkback: don't leak persistent grants from xen_blkbk_map()
|
2021-03-30 14:41:43 +02:00 |
|
bluetooth
|
Bluetooth: btusb: fix PM leak in error case of setup
|
2020-01-12 11:24:16 +01:00 |
|
bus
|
bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
|
2021-03-30 14:41:40 +02:00 |
|
cdrom
|
cdrom: respect device capabilities during opening action
|
2020-01-04 13:41:02 +01:00 |
|
char
|
parisc: parisc-agp requires SBA IOMMU driver
|
2021-04-16 11:59:07 +02:00 |
|
clk
|
clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
|
2021-05-22 10:40:17 +02:00 |
|
clocksource
|
clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
|
2021-03-03 17:44:37 +01:00 |
|
connector
|
|
|
|
cpufreq
|
cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()
|
2021-01-17 13:57:54 +01:00 |
|
cpuidle
|
cpuidle: Fix three reference count leaks
|
2020-06-20 10:24:18 +02:00 |
|
crypto
|
crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
|
2020-12-29 13:44:55 +01:00 |
|
dax
|
|
|
|
dca
|
|
|
|
devfreq
|
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
|
2020-10-01 20:40:02 +02:00 |
|
dio
|
|
|
|
dma
|
dmaengine: dw: Make it dependent to HAS_IOMEM
|
2021-04-28 12:07:14 +02:00 |
|
dma-buf
|
|
|
|
edac
|
EDAC/i5100: Fix error handling order in i5100_init_one()
|
2020-10-29 09:05:32 +01:00 |
|
eisa
|
|
|
|
extcon
|
extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged
|
2021-05-22 10:40:17 +02:00 |
|
firewire
|
firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
|
2021-04-07 12:05:40 +02:00 |
|
firmware
|
efi: Make it possible to disable efivar_ssdt entirely
|
2020-07-09 09:35:57 +02:00 |
|
fmc
|
|
|
|
fpga
|
|
|
|
gpio
|
gpio: pcf857x: Fix missing first interrupt
|
2021-03-03 17:44:44 +01:00 |
|
gpu
|
drm/amdgpu: fix NULL pointer dereference
|
2021-05-22 10:40:18 +02:00 |
|
hid
|
HID: alps: fix error return code in alps_input_configured()
|
2021-04-28 12:07:16 +02:00 |
|
hsi
|
HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
|
2020-12-29 13:44:56 +01:00 |
|
hv
|
Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
|
2020-09-23 08:46:15 +02:00 |
|
hwmon
|
hwmon: (lm90) Fix max6658 sporadic wrong temperature reading
|
2021-03-17 16:10:18 +01:00 |
|
hwspinlock
|
|
|
|
hwtracing
|
intel_th: Consistency and off-by-one fix
|
2021-05-22 10:40:16 +02:00 |
|
i2c
|
i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition
|
2021-03-03 17:44:40 +01:00 |
|
ide
|
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
|
2020-09-12 11:47:36 +02:00 |
|
idle
|
|
|
|
iio
|
iio: hid-sensor-prox: Fix scale not correct issue
|
2021-04-16 11:59:05 +02:00 |
|
infiniband
|
RDMA/cxgb4: check for ipv6 address properly while destroying listener
|
2021-04-16 11:59:08 +02:00 |
|
input
|
Input: i8042 - fix Pegatron C15B ID entry
|
2021-04-28 12:07:15 +02:00 |
|
iommu
|
iommu/amd: Fix sleeping in atomic in increase_address_space()
|
2021-03-11 13:48:03 +01:00 |
|
ipack
|
|
|
|
irqchip
|
irqchip/alpine-msi: Fix freeing of interrupts on allocation error path
|
2020-12-29 13:45:00 +01:00 |
|
isdn
|
mISDN: fix crash in fritzpci
|
2021-04-10 13:04:44 +02:00 |
|
leds
|
leds: trigger: fix potential deadlock with libata
|
2021-02-03 23:19:50 +01:00 |
|
lguest
|
|
|
|
lightnvm
|
|
|
|
macintosh
|
drivers/macintosh: Fix memleak in windfarm_pm112 driver
|
2020-06-20 10:24:21 +02:00 |
|
mailbox
|
|
|
|
mcb
|
|
|
|
md
|
dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
|
2021-05-22 10:40:20 +02:00 |
|
media
|
media: dvbdev: Fix memory leak in dvb_media_device_free()
|
2021-05-22 10:40:19 +02:00 |
|
memory
|
memory: emif: Remove bogus debugfs error handling
|
2020-11-10 10:23:55 +01:00 |
|
memstick
|
memstick: r592: Fix error return in r592_probe()
|
2020-12-29 13:44:58 +01:00 |
|
message
|
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
|
2020-11-10 10:23:57 +01:00 |
|
mfd
|
mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
|
2021-03-03 17:44:38 +01:00 |
|
misc
|
misc: vmw_vmci: explicitly initialize vmci_datagram payload
|
2021-05-22 10:40:21 +02:00 |
|
mmc
|
mmc: core: Set read only for SD cards with permanent write protect bit
|
2021-05-22 10:40:15 +02:00 |
|
mtd
|
mtd: spi-nor: hisi-sfc: Put child node np on error path
|
2021-03-03 17:44:43 +01:00 |
|
net
|
FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
|
2021-05-22 10:40:20 +02:00 |
|
nfc
|
nfc: s3fwrn5: Release the nfc firmware
|
2020-12-29 13:45:00 +01:00 |
|
ntb
|
NTB: hw: amd: fix an issue about leak system resources
|
2020-10-29 09:05:41 +01:00 |
|
nubus
|
|
|
|
nvdimm
|
libnvdimm/dimm: Avoid race between probe and available_slots_show()
|
2021-03-03 17:44:44 +01:00 |
|
nvme
|
nvmet: don't check iosqes,iocqes for discovery controllers
|
2021-03-24 10:59:23 +01:00 |
|
nvmem
|
nvmem: qfprom: remove incorrect write support
|
2020-06-11 09:22:22 +02:00 |
|
of
|
of/fdt: Make sure no-map does not remove already reserved regions
|
2021-03-03 17:44:37 +01:00 |
|
oprofile
|
|
|
|
parisc
|
parisc: mask out enable and reserved bits from sba imask
|
2020-08-21 11:02:06 +02:00 |
|
parport
|
|
|
|
pci
|
PCI: PM: Do not read power state in pci_enable_device_flags()
|
2021-05-22 10:40:16 +02:00 |
|
pcmcia
|
|
|
|
perf
|
|
|
|
phy
|
phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
|
2021-05-22 10:40:16 +02:00 |
|
pinctrl
|
pinctrl: rockchip: fix restore error in resume
|
2021-04-07 12:05:40 +02:00 |
|
platform
|
platform/x86: thinkpad_acpi: Correct thermal sensor allocation
|
2021-05-22 10:40:15 +02:00 |
|
pnp
|
|
|
|
power
|
power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove()
|
2021-05-22 10:40:18 +02:00 |
|
powercap
|
powercap: restrict energy meter to root access
|
2020-11-10 21:04:57 +01:00 |
|
pps
|
|
|
|
ps3
|
powerpc/ps3: use dma_mapping_error()
|
2020-12-29 13:45:00 +01:00 |
|
ptp
|
ptp: free ptp device pin descriptors properly
|
2020-05-20 08:15:33 +02:00 |
|
pwm
|
pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()
|
2021-03-03 17:44:39 +01:00 |
|
rapidio
|
rapidio: fix the missed put_device() for rio_mport_add_riodev
|
2020-10-29 09:05:39 +01:00 |
|
ras
|
|
|
|
regulator
|
regulator: axp20x: Fix reference cout leak
|
2021-03-03 17:44:37 +01:00 |
|
remoteproc
|
remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load
|
2021-02-23 13:59:14 +01:00 |
|
reset
|
|
|
|
rpmsg
|
|
|
|
rtc
|
rtc: rx8010: don't modify the global rtc ops
|
2020-11-10 10:23:59 +01:00 |
|
s390
|
s390/dasd: fix hanging DASD driver unbind
|
2021-03-17 16:10:15 +01:00 |
|
sbus
|
|
|
|
scsi
|
scsi: libfc: Fix a format specifier
|
2021-05-22 10:40:18 +02:00 |
|
sfi
|
|
|
|
sh
|
|
|
|
sn
|
|
|
|
soc
|
soc/fsl: qbman: fix conflicting alignment attributes
|
2021-04-16 11:59:08 +02:00 |
|
spi
|
spi: omap-100k: Fix reference leak to master
|
2021-05-22 10:40:16 +02:00 |
|
spmi
|
|
|
|
ssb
|
|
|
|
staging
|
staging: rtl8192e: Change state information from u16 to u8
|
2021-04-07 12:05:41 +02:00 |
|
target
|
scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
|
2021-05-22 10:40:17 +02:00 |
|
tc
|
|
|
|
thermal
|
thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430
|
2020-09-12 11:47:34 +02:00 |
|
thunderbolt
|
|
|
|
tty
|
vt/consolemap: do font sum unsigned
|
2021-03-07 11:25:57 +01:00 |
|
uio
|
uio_pdrv_genirq: fix use without device tree and no interrupt
|
2020-07-22 09:10:53 +02:00 |
|
usb
|
usb: gadget/function/f_fs string table fix for multiple languages
|
2021-05-22 10:40:20 +02:00 |
|
uwb
|
|
|
|
vfio
|
vfio/pci: Move dummy_resources_list init in vfio_pci_probe()
|
2021-01-09 13:35:48 +01:00 |
|
vhost
|
vhost: Fix vhost_vq_reset()
|
2021-04-07 12:05:39 +02:00 |
|
video
|
fbdev: zero-fill colormap in fbcmap.c
|
2021-05-22 10:40:16 +02:00 |
|
virt
|
drivers/virt/fsl_hypervisor: Fix error handling path
|
2020-10-29 09:05:35 +01:00 |
|
virtio
|
virtio_ring: Avoid loop when vq is broken in virtqueue_poll
|
2020-08-26 10:29:05 +02:00 |
|
vlynq
|
|
|
|
vme
|
vme: bridges: reduce stack usage
|
2020-02-28 15:42:33 +01:00 |
|
w1
|
w1: mxc_w1: Fix timeout resolution problem leading to bus error
|
2020-11-10 10:23:57 +01:00 |
|
watchdog
|
watchdog: qcom: Avoid context switch in restart handler
|
2020-12-29 13:45:01 +01:00 |
|
xen
|
xen/events: fix setting irq affinity
|
2021-04-16 11:59:12 +02:00 |
|
zorro
|
|
|
|
Kconfig
|
|
|
|
Makefile
|
|
|