Krzysztof Kozlowski 81a6cff473 mfd: tps65910: Fix possible invalid pointer dereference on regmap_add_irq_chip fail ...

commit 483e2dfdbc upstream.

Fixes: 4aab3fadad ("mfd: tps65910: Move interrupt implementation code to mfd file")

tps65910_irq_init() sets 'tps65910->chip_irq' before calling
regmap_add_irq_chip(). If the regmap_add_irq_chip() call fails in
memory allocation of regmap_irq_chip_data members then:

1. The 'tps65910->chip_irq' will still hold some value
2. 'tps65910->irq_data' will be pointing to already freed memory
   (because regmap_add_irq_chip() will free it on error)

This results in invalid memory access during driver remove because the
tps65910_irq_exit() tests whether 'tps65910->chip_irq' is not zero.

Signed-off-by: Krzysztof Kozlowski <k.kozlowski@samsung.com>
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-05-06 07:55:28 -07:00

..

88pm80x.c

mfd: 88pm80x: Remove redundant devm_* calls

2013-02-14 00:22:54 +01:00

88pm800.c

mfd: 88pm80x: Remove redundant devm_* calls

2013-02-14 00:22:54 +01:00

88pm805.c

mfd: 88pm80x: Remove redundant devm_* calls

2013-02-14 00:22:54 +01:00

88pm860x-core.c

mfd: 88pm860x: Fix I2C device resource leak on regmap init fail

2014-05-06 07:55:28 -07:00

88pm860x-i2c.c

mfd: Convert struct i2c_msg initialization to C99 format

2012-09-21 23:40:34 +02:00

aat2870-core.c

mfd: aat2870: Use use devm_*() functions

2013-04-08 17:25:26 +02:00

ab3100-core.c

regulator: ab3100: device tree support

2013-04-24 10:54:07 +01:00

ab3100-otp.c

mfd: ab3100-otp: use module_platform_driver_probe()

2013-04-05 18:08:31 +02:00

ab8500-core.c

mfd: ab8500-core: Pass GPADC compatible string to MFD core

2013-05-17 00:42:33 +02:00

ab8500-debugfs.c

mfd: ab8500: Pass AB8500 IRQ to debugfs code by resource

2013-05-17 00:42:31 +02:00

ab8500-gpadc.c

mfd: ab8500-gpadc: Suppress 'ignoring regulator_enable() return value' warning

2013-05-17 00:42:31 +02:00

ab8500-sysctrl.c

mfd: ab8500-sysctrl: Let sysctrl driver work without pdata

2013-05-21 23:23:21 +02:00

abx500-core.c

mfd: abx500-core: Fix sparse warning

2013-05-17 00:42:29 +02:00

adp5520.c

mfd: adp5520: Restore mode bits on resume

2013-04-08 16:48:06 +02:00

arizona-core.c

mfd: wm5102: Don't wait for boot when boot sequencer is disabled

2013-04-08 15:21:03 +02:00

arizona-i2c.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

arizona-irq.c

mfd: arizona: Try to use interrupt flags from interrupt controller

2013-04-08 15:20:58 +02:00

arizona-spi.c

mfd: arizona: Use spi_get_drvdata()

2013-04-09 12:18:16 +02:00

arizona.h

…

as3711.c

mfd: as3711: Add OF support

2013-04-05 11:20:14 +02:00

asic3.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

cros_ec_i2c.c

mfd: Add ChromeOS EC I2C driver

2013-04-05 11:20:13 +02:00

cros_ec_spi.c

mfd: cros_ec_spi: Use %z to format pointer differences

2013-05-16 19:14:06 +02:00

cros_ec.c

mfd: cros_ec: Export needed symbols for the i2c and spi modules

2013-04-05 11:20:13 +02:00

cs5535-mfd.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

da903x.c

mfd: da903x: Use devm_*() functions

2013-04-08 17:25:28 +02:00

da9052-core.c

Merge tag 'mfd-3.8-1' of git://git.kernel.org/pub/scm/linux/kernel/git/sameo/mfd-2.6

2012-12-16 18:55:20 -08:00

da9052-i2c.c

mfd: da9052-i2c: Staticize da9052_i2c_fix()

2013-02-14 00:26:41 +01:00

da9052-irq.c

mfd: da9052: Introduce da9052-irq.c

2012-11-20 12:21:10 +01:00

da9052-spi.c

mfd: da9052: Use spi_get_drvdata() and spi_set_drvdata()

2013-04-09 12:18:16 +02:00

da9055-core.c

mfd: da9055: Change irq state to default

2013-04-09 10:09:26 +02:00

da9055-i2c.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

davinci_voicecodec.c

mfd: davinci_voicecodec: use module_platform_driver_probe()

2013-04-05 18:08:45 +02:00

db8500-prcmu.c

mfd: db8500-prcmu: Update stored DSI PLL divider value

2013-05-17 00:42:34 +02:00

dbx500-prcmu-regs.h

ARM: ux500: move PM-related PRCMU functions to machine

2013-04-08 13:57:53 +02:00

dm355evm_msp.c

…

ezx-pcap.c

mfd: ezx-pcap: Use spi_get_drvdata() and spi_set_drvdata()

2013-04-09 12:18:16 +02:00

htc-egpio.c

…

htc-i2cpld.c

mfd: remove use of __devinit

2012-11-28 12:20:19 -08:00

htc-pasic3.c

mfd: htc-pasic3: use module_platform_driver_probe()

2013-04-05 18:08:45 +02:00

intel_msic.c

drivers/mfd: don't check resource with devm_ioremap_resource

2013-05-18 11:55:53 +02:00

janz-cmodio.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

jz4740-adc.c

Merge tag 'mfd-3.8-1' of git://git.kernel.org/pub/scm/linux/kernel/git/sameo/mfd-2.6

2012-12-16 18:55:20 -08:00

Kconfig

mfd: ab8500: Debugfs code depends on gpadc

2013-05-17 00:42:29 +02:00

lm3533-core.c

mfd: lm3533: Use devm_gpio_request_one()

2013-04-08 17:25:23 +02:00

lm3533-ctrlbank.c

…

lp8788-irq.c

mfd: Add lp8788 mfd driver

2012-09-23 20:51:34 +02:00

lp8788.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

lpc_ich.c

mfd: lpc_ich: iTCO_wdt patch for Intel Coleto Creek DeviceIDs

2014-02-13 13:48:03 -08:00

lpc_sch.c

mfd: lpc_sch: Accomodate partial population of the MFD devices

2013-02-14 00:26:45 +01:00

Makefile

mfd: si476x: Add header files and Kbuild plumbing

2013-04-19 18:38:13 +02:00

max8907.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

max8925-core.c

mfd: max8925: Fix onkey driver irq base

2013-02-14 00:23:00 +01:00

max8925-i2c.c

mfd: max8925: Fix possible NULL pointer dereference on i2c_new_dummy error

2014-05-06 07:55:28 -07:00

max8997-irq.c

…

max8997.c

mfd: max8997: Fix possible NULL pointer dereference on i2c_new_dummy error

2014-05-06 07:55:28 -07:00

max8998-irq.c

…

max8998.c

mfd: max8998: Fix possible NULL pointer dereference on i2c_new_dummy error

2014-05-06 07:55:28 -07:00

max77686-irq.c

…

max77686.c

mfd: max77686: Fix possible NULL pointer dereference on i2c_new_dummy error

2014-05-06 07:55:28 -07:00

max77693-irq.c

mfd: MAX77693: Fix interrupt handling bug

2012-09-16 00:32:57 +02:00

max77693.c

mfd: max77693: Fix possible NULL pointer dereference on i2c_new_dummy error

2014-05-06 07:55:28 -07:00

mc13xxx-core.c

mfd: mc13xxx: Add support for mc34708

2012-11-06 23:14:08 +01:00

mc13xxx-i2c.c

Merge tag 'mfd-3.8-1' of git://git.kernel.org/pub/scm/linux/kernel/git/sameo/mfd-2.6

2012-12-16 18:55:20 -08:00

mc13xxx-spi.c

mfd: mc13xxx: Use spi_get_drvdata() and spi_set_drvdata()

2013-04-09 12:18:16 +02:00

mc13xxx.h

mfd: mc13xxx: Add support for mc34708

2012-11-06 23:14:08 +01:00

mcp-core.c

…

mcp-sa11x0.c

ARM: sa1100: move platform_data definitions

2012-09-14 11:18:57 +02:00

menelaus.c

ARM: OMAP2: Move plat/menelaus.h to linux/mfd/menelaus.h

2012-10-15 13:53:41 -07:00

mfd-core.c

mfd: Only unregister platform devices allocated by the mfd core

2012-11-20 12:21:12 +01:00

omap-usb-host.c

mfd: omap-usb-host: Convert to devm_ioremap_resource()

2013-04-09 15:01:31 +02:00

omap-usb-tll.c

mfd: omap-usb-tll: Convert to devm_ioremap_resource()

2013-04-09 15:01:31 +02:00

omap-usb.h

mfd: omap-usb-tll: Move configuration code to omap_tll_init()

2013-04-09 09:46:23 +02:00

palmas.c

mfd: palmas: Initialise client->of_node for dummy created client

2013-04-08 18:13:20 +02:00

pcf50633-adc.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

pcf50633-core.c

mfd: pcf50633: Init pcf->dev before using it

2013-01-22 03:05:33 +01:00

pcf50633-gpio.c

…

pcf50633-irq.c

…

pm8xxx-irq.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

pm8921-core.c

SSBI: Remove MSM_ prefix from SSBI drivers

2013-03-25 10:39:40 -07:00

rc5t583-irq.c

mfd: rc5t583: Fix array subscript is above array bounds

2012-11-26 12:10:51 +01:00

rc5t583.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

rdc321x-southbridge.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

retu-mfd.c

mfd: retu: Add Tahvo support

2013-04-19 00:45:20 +02:00

rtl8411.c

mfd: rtsx: Implement driving adjustment to device-dependent callbacks

2013-02-14 00:22:59 +01:00

rts5209.c

mfd: rtsx: Implement driving adjustment to device-dependent callbacks

2013-02-14 00:22:59 +01:00

rts5227.c

mfd: rtsx: Support RTS5227

2013-02-14 00:22:59 +01:00

rts5229.c

mfd: rtsx: Implement driving adjustment to device-dependent callbacks

2013-02-14 00:22:59 +01:00

rts5249.c

mfd: rtsx: Support RTS5249

2013-04-19 18:29:18 +02:00

rtsx_pcr.c

mfd: rtsx_pcr: Disable interrupts before cancelling delayed works

2014-01-15 15:28:52 -08:00

rtsx_pcr.h

mfd: rtsx: Support RTS5249

2013-04-19 18:29:18 +02:00

sec-core.c

mfd: sec-core: Fix possible NULL pointer dereference when i2c_new_dummy error

2014-05-06 07:55:27 -07:00

sec-irq.c

mfd: sec: Fix reg_offset for interrupt registers

2012-11-26 00:35:08 +01:00

si476x-cmd.c

mfd: si476x: Use get_unaligned_be16() for unaligned be16 loads

2013-05-16 19:15:07 +02:00

si476x-i2c.c

mfd: si476x: Fix i2c warning

2013-04-19 18:40:05 +02:00

si476x-prop.c

mfd: si476x: Add chip properties handling code

2013-04-19 18:37:59 +02:00

sm501.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

smsc-ece1099.c

mfd: smsc: Add support for smsc gpio io/keypad driver

2012-10-01 15:27:48 +02:00

sta2x11-mfd.c

mfd: sta2x11: Build warning fix

2013-04-08 17:28:29 +02:00

stmpe-i2c.c

mfd: support stmpe1801 18 bits enhanced port expander

2013-04-09 14:15:58 +02:00

stmpe-spi.c

mfd: stmpe: Use spi_get_drvdata()

2013-04-09 12:18:16 +02:00

stmpe.c

mfd: support stmpe1801 18 bits enhanced port expander

2013-04-09 14:15:58 +02:00

stmpe.h

mfd: support stmpe1801 18 bits enhanced port expander

2013-04-09 14:15:58 +02:00

syscon.c

mfd: syscon: Fix warnings when printing resource_size_t

2013-04-09 22:50:44 +02:00

t7l66xb.c

mfd: core: Push irqdomain mapping out into devices

2012-09-15 23:22:04 +02:00

tc3589x.c

mfd: tc3589x: Use devm_*() functions

2013-04-08 17:25:29 +02:00

tc6387xb.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

tc6393xb.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

ti_am335x_tscadc.c

Drivers: mfd: remove __dev* attributes.

2013-01-03 15:57:14 -08:00

ti-ssp.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

timberdale.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

timberdale.h

…

tmio_core.c

…

tps6105x.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

tps6507x.c

mfd: tps6507x: Add DT support

2013-02-14 00:22:54 +01:00

tps6586x.c

mfd: tps6586x: correct device name of the regulator cell

2013-06-24 12:37:47 +01:00

tps65010.c

…

tps65090.c

mfd: tps65090: Add compatible string for charger subnode

2013-04-11 00:16:29 +02:00

tps65217.c

Merge tag 'mfd-3.8-1' of git://git.kernel.org/pub/scm/linux/kernel/git/sameo/mfd-2.6

2012-12-16 18:55:20 -08:00

tps65910.c

mfd: tps65910: Fix possible invalid pointer dereference on regmap_add_irq_chip fail

2014-05-06 07:55:28 -07:00

tps65911-comparator.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

tps65912-core.c

mfd: tps65912: Declare and use tps65912_irq_exit()

2013-03-12 09:25:50 +01:00

tps65912-i2c.c

…

tps65912-irq.c

…

tps65912-spi.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

tps80031.c

Drivers: mfd: remove __dev* attributes.

2013-01-03 15:57:14 -08:00

twl4030-audio.c

mfd: twl4030-audio: Fix argument type for twl4030_audio_disable_resource()

2013-03-12 09:25:51 +01:00

twl4030-irq.c

Merge tag 'mfd-3.8-1' of git://git.kernel.org/pub/scm/linux/kernel/git/sameo/mfd-2.6

2012-12-16 18:55:20 -08:00

twl4030-madc.c

mfd: twl4030-madc: Add support for raw value in twl4030_madc_conversion

2013-04-08 16:36:23 +02:00

twl4030-power.c

mfd: twl4030: Don't warn about uninitialized return code

2013-01-27 02:18:01 +01:00

twl6030-irq.c

mfd/rtc/gpio: twl: No need to allocate bigger buffer for write

2012-11-21 16:08:00 +01:00

twl6040.c

mfd: twl6040: Use devm_*() functions

2013-04-08 17:25:27 +02:00

twl-core.c

mfd: twl-core: Fix kernel panic on boot

2013-02-14 00:26:28 +01:00

twl-core.h

…

ucb1x00-assabet.c

…

ucb1x00-core.c

…

ucb1x00-ts.c

…

ucb1400_core.c

mfd: ucb1400: Pass ucb1400-gpio data through ac97 bus

2013-04-19 00:40:07 +02:00

vexpress-config.c

mfd: vexpress: Handle pending config transactions

2013-04-26 16:10:03 +02:00

vexpress-sysreg.c

mfd: vexpress: Give the "leds-gpio" device a real parent

2013-04-09 12:09:09 +02:00

viperboard.c

mfd: viperboard: Do version query in dma memory

2012-11-26 11:48:56 +01:00

vx855.c

mfd: remove use of __devexit

2012-11-28 12:22:27 -08:00

wl1273-core.c

mfd: remove use of __devinit

2012-11-28 12:20:19 -08:00

wm831x-auxadc.c

…

wm831x-core.c

mfd: core: Push irqdomain mapping out into devices

2012-09-15 23:22:04 +02:00

wm831x-i2c.c

…

wm831x-irq.c

…

wm831x-otp.c

…

wm831x-spi.c

mfd: wm831x: Use spi_get_drvdata() and spi_set_drvdata()

2013-04-09 12:18:16 +02:00

wm5102-tables.c

Merge tag 'mfd-3.10-1' of git://git.kernel.org/pub/scm/linux/kernel/git/sameo/mfd-next

2013-05-05 17:36:20 -07:00

wm5110-tables.c

mfd: wm5110: Mark wakes as inverted

2013-01-04 20:53:45 +00:00

wm8350-core.c

…

wm8350-gpio.c

…

wm8350-i2c.c

…

wm8350-irq.c

…

wm8350-regmap.c

…

wm8400-core.c

mfd: core: Push irqdomain mapping out into devices

2012-09-15 23:22:04 +02:00

wm8994-core.c

mfd: wm8994: Add some OF properties

2013-04-19 00:35:21 +02:00

wm8994-irq.c

mfd: wm8994: Flag the interrupt block as requiring runtime PM be enabled

2012-08-07 20:30:00 +01:00

wm8994-regmap.c

mfd: wm8994: Implement support for WM1811 devices with higher cust_ids

2012-09-14 09:52:11 +02:00

wm8994.h

…