Alexander Usyskin 23253c31c6 mei: do not access freed cb in blocking write ... The mei_cl_write function is giving up on a write cb ownership after it was sent or queued. The write cb is then freed in the completion handler. Especially during blocking write mei_cl_write function waits for the completion handler and then access the freed memory to fetch the written size. The quick fix is to store the buffer size prior to sending, the size is not altered during the flow. Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com> Signed-off-by: Tomas Winkler <tomas.winkler@intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2015-08-03 17:19:09 -07:00
..
altera-stapl	drivers/misc/altera-stapl/altera.c: remove extraneous KERN_INFO prefix	2015-06-25 17:00:38 -07:00
c2port
cb710
cxl	cxl: Check if afu is not null in cxl_slbia	2015-07-10 11:44:25 +10:00
echo
eeprom	misc: Drop owner assignment from i2c_driver	2015-07-27 10:30:48 -07:00
genwqe	GenWQE: remove unnecessary version.h inclusion	2015-01-12 05:04:11 -08:00
ibmasm
lis3lv02d	misc: Drop owner assignment from i2c_driver	2015-07-27 10:30:48 -07:00
mei	mei: do not access freed cb in blocking write	2015-08-03 17:19:09 -07:00
mic	misc: mic: scif bug fix for vmalloc_to_page crash	2015-07-22 21:25:36 -07:00
sgi-gru
sgi-xp	x86/asm/entry: Change all 'user_mode_vm()' calls to 'user_mode()'	2015-03-23 11:14:17 +01:00
ti-st	misc: Drop owner assignment from i2c_driver	2015-07-27 10:30:48 -07:00
vmw_vmci	VMCI: Guard against overflow in queue pair allocation	2015-03-25 11:32:15 +01:00
ad525x_dpot-i2c.c	misc: Drop owner assignment from i2c_driver	2015-07-27 10:30:48 -07:00
ad525x_dpot-spi.c	ad525x_dpot-spi: Added Blank lines after declarations	2015-01-12 05:04:12 -08:00
ad525x_dpot.c	ad525x_dpot:Remove break after return	2015-01-12 05:04:12 -08:00
ad525x_dpot.h
apds990x.c	misc: Drop owner assignment from i2c_driver	2015-07-27 10:30:48 -07:00
apds9802als.c
arm-charlcd.c	misc: drop owner assignment from platform_drivers	2014-10-20 16:20:54 +02:00
atmel_tclib.c
atmel-ssc.c	Char/Misc driver patches for 3.19-rc1	2014-12-14 16:43:47 -08:00
bh1770glc.c	misc: Drop owner assignment from i2c_driver	2015-07-27 10:30:48 -07:00
bh1780gli.c	misc: bh1780: Add module aliases	2015-03-16 21:10:28 +01:00
bmp085-i2c.c	misc: Drop owner assignment from i2c_driver	2015-07-27 10:30:48 -07:00
bmp085-spi.c
bmp085.c
bmp085.h
cs5535-mfgpt.c	misc: drop owner assignment from platform_drivers	2014-10-20 16:20:54 +02:00
ds1682.c
dummy-irq.c
enclosure.c	enclosure: fix WARN_ON removing an adapter in multi-path devices	2015-03-31 08:53:36 +03:00
fsa9480.c
hmc6352.c
hpilo.c
hpilo.h
ics932s401.c
ioc4.c	misc: ioc4: simplify wave period measurement in clock_calibrate	2015-01-12 05:04:11 -08:00
isl29003.c	misc: Drop owner assignment from i2c_driver	2015-07-27 10:30:48 -07:00
isl29020.c
Kconfig	ARM: qcom: Add coincell charger driver	2015-07-29 13:37:18 -07:00
kgdbts.c	clone: support passing tls argument via C rather than pt_regs magic	2015-06-25 17:00:38 -07:00
lattice-ecp3-config.c
lkdtm.c
Makefile	ARM: qcom: Add coincell charger driver	2015-07-29 13:37:18 -07:00
pch_phub.c	pch_phub: Build context save/restore only for PM	2014-11-07 10:28:36 -08:00
phantom.c
pti.c
qcom-coincell.c	ARM: qcom: Add coincell charger driver	2015-07-29 13:37:18 -07:00
spear13xx_pcie_gadget.c	Pratyush Anand has moved	2015-06-25 17:00:38 -07:00
sram.c	misc: sram: sort and clean up included headers	2015-06-12 17:03:57 -07:00
ti_dac7512.c
tifm_7xx1.c	misc: tifm: match return type of wait_for_completion_timeout	2015-03-25 11:36:38 +01:00
tifm_core.c
tsl2550.c	misc: Drop owner assignment from i2c_driver	2015-07-27 10:30:48 -07:00
vexpress-syscfg.c	ARM: vexpress: Remove non-DT code	2014-11-28 16:08:16 +01:00
vmw_balloon.c