Zijun Hu cd126daadf of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent() ...

commit fec3edc47d upstream.

On a malformed interrupt-map property which is shorter than expected by
1 cell, we may read bogus data past the end of the property instead of
returning an error in of_irq_parse_imap_parent().

Decrement the remaining length when skipping over the interrupt parent
phandle cell.

Fixes: 935df1bd40 ("of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw()")
Cc: stable@vger.kernel.org
Signed-off-by: Zijun Hu <quic_zijuhu@quicinc.com>
Link: https://lore.kernel.org/r/20241209-of_irq_fix-v1-1-782f1419c8a1@quicinc.com
[rh: reword commit msg]
Signed-off-by: Rob Herring (Arm) <robh@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-12-27 13:53:00 +01:00

..

accessibility

…

acpi

ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired

2024-12-19 18:08:56 +01:00

amba

…

android

…

ata

ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()

2024-12-19 18:08:48 +01:00

atm

…

auxdisplay

…

base

regmap: detach regmap from dev on regmap_exit

2024-12-14 19:54:36 +01:00

bcma

…

block

zram: fix uninitialized ZRAM not releasing backing device

2024-12-27 13:52:59 +01:00

bluetooth

Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables

2024-12-14 19:54:44 +01:00

bus

…

cdrom

…

char

char: xillybus: Fix trivial bug with mutex

2024-11-22 15:37:35 +01:00

clk

clk: qcom: gcc-qcs404: fix initial rate of GPLL3

2024-12-14 19:54:13 +01:00

clocksource

clocksource/drivers/timer-ti-dm: Fix child node refcount handling

2024-12-14 19:53:19 +01:00

comedi

comedi: Flush partial mappings in error case

2024-12-14 19:53:59 +01:00

connector

…

counter

counter: ti-ecap-capture: Add check for clk_enable()

2024-12-14 19:53:53 +01:00

cpufreq

cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()

2024-12-14 19:54:02 +01:00

cpuidle

…

crypto

crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()

2024-12-14 19:53:18 +01:00

cxl

cxl/region: Fix region creation for greater than x2 switches

2024-12-27 13:52:53 +01:00

dax

dax: delete a stale directory pmem

2024-12-14 19:53:41 +01:00

dca

…

devfreq

…

dio

…

dma

…

dma-buf

dma-fence: Use kernel's sort for merging fences

2024-12-14 19:54:36 +01:00

edac

EDAC/igen6: Avoid segmentation fault on module unload

2024-12-14 19:53:17 +01:00

eisa

…

extcon

…

firewire

…

firmware

arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint

2024-12-14 19:54:53 +01:00

fpga

fpga: manager: add owner module and take its refcount

2024-12-14 19:53:12 +01:00

fsi

…

gnss

…

gpio

gpio: grgpio: Add NULL check in grgpio_probe

2024-12-14 19:54:24 +01:00

gpu

drm/amdgpu: don't access invalid sched

2024-12-27 13:52:57 +01:00

greybus

…

hid

HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support

2024-12-14 19:54:38 +01:00

hsi

…

hte

…

hv

Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet

2024-12-27 13:52:59 +01:00

hwmon

hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers

2024-12-27 13:52:58 +01:00

hwspinlock

…

hwtracing

…

i2c

i2c: riic: Always round-up when calculating bus period

2024-12-27 13:52:55 +01:00

i3c

i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition

2024-12-14 19:54:56 +01:00

idle

…

iio

iio: light: ltr501: Add LTER0303 to the supported devices

2024-12-14 19:54:48 +01:00

infiniband

RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()

2024-12-14 19:53:41 +01:00

input

…

interconnect

…

iommu

iommu/arm-smmu: Defer probe of clients after smmu device bound

2024-12-14 19:54:37 +01:00

ipack

…

irqchip

irqchip/ocelot: Fix trigger register address

2024-11-17 15:07:20 +01:00

isdn

…

leds

leds: class: Protect brightness_show() with led_cdev->led_access mutex

2024-12-14 19:54:46 +01:00

macintosh

…

mailbox

mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()

2024-12-14 19:53:54 +01:00

mcb

…

md

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

2024-12-14 19:54:34 +01:00

media

media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108

2024-12-14 19:54:38 +01:00

memory

memory: renesas-rpc-if: Pass device instead of rpcif to rpcif_*()

2024-12-14 19:53:36 +01:00

memstick

…

message

scsi: fusion: Remove unused variable 'rc'

2024-12-14 19:53:40 +01:00

mfd

mfd: rt5033: Fix missing regmap_del_irq_chip()

2024-12-14 19:53:40 +01:00

misc

misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle

2024-12-14 19:54:49 +01:00

mmc

mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk

2024-12-27 13:52:55 +01:00

most

…

mtd

ubi: fastmap: Fix duplicate slab cache names while attaching

2024-12-14 19:54:08 +01:00

mux

…

net

chelsio/chtls: prevent potential integer overflow on 32bit

2024-12-27 13:52:55 +01:00

nfc

…

ntb

…

nubus

…

nvdimm

nvdimm: rectify the illogical code within nd_dax_probe()

2024-12-14 19:54:47 +01:00

nvme

nvme-pci: reverse request order in nvme_queue_rqs

2024-12-14 19:53:16 +01:00

nvmem

…

of

of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()

2024-12-27 13:53:00 +01:00

opp

…

parisc

…

parport

…

pci

PCI: Add ACS quirk for Broadcom BCM5760X NIC

2024-12-27 13:52:52 +01:00

pcmcia

…

peci

…

perf

perf/arm-cmn: Ensure port and device id bits are set properly

2024-12-14 19:54:09 +01:00

phy

…

pinctrl

pinctrl: qcom: spmi-mpp: Add PM8937 compatible

2024-12-14 19:54:47 +01:00

platform

p2sb: Do not scan and remove the P2SB device when it is unhidden

2024-12-27 13:52:53 +01:00

pnp

…

power

power: supply: bq27xxx: Fix registers of bq27426

2024-12-14 19:53:49 +01:00

powercap

powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()

2024-11-01 01:56:05 +01:00

pps

tty/serial: Make ->dcd_change()+uart_handle_dcd_change() status bool active

2024-11-01 01:56:02 +01:00

ps3

…

ptp

ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()

2024-12-19 18:08:53 +01:00

pwm

pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle

2024-12-14 19:53:22 +01:00

rapidio

…

ras

…

regulator

regulator: rk808: Add apply_bit for BUCK3 on RK809

2024-12-14 19:53:09 +01:00

remoteproc

remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region

2024-12-14 19:53:47 +01:00

reset

…

rpmsg

rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length

2024-12-14 19:53:47 +01:00

rtc

rtc: cmos: avoid taking rtc_lock for extended period of time

2024-12-14 19:54:49 +01:00

s390

s390/cio: Do not unregister the subchannel based on DNV

2024-12-14 19:53:14 +01:00

sbus

…

scsi

scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset

2024-12-14 19:54:46 +01:00

sh

sh: clk: Fix clk_enable() to return 0 on NULL clk

2024-12-27 13:52:58 +01:00

siox

…

slimbus

…

soc

soc: imx8m: Probe the SoC driver as platform driver

2024-12-14 19:54:38 +01:00

soundwire

…

spi

spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()

2024-12-19 18:08:55 +01:00

spmi

…

ssb

…

staging

media: atomisp: Add check for rgby_data memory allocation failure

2024-12-14 19:53:24 +01:00

target

scsi: target: core: Fix null-ptr-deref in target_alloc_device()

2024-11-01 01:56:00 +01:00

tc

…

tee

…

thermal

thermal: int3400: Fix reading of current_uuid for active policy

2024-12-14 19:54:15 +01:00

thunderbolt

thunderbolt: Improve redrive mode handling

2024-12-27 13:52:56 +01:00

tty

serial: amba-pl011: fix build regression

2024-12-14 19:54:55 +01:00

ufs

scsi: ufs: core: Make DMA mask configuration more flexible

2024-12-14 19:54:46 +01:00

uio

…

usb

USB: serial: option: add Telit FE910C04 rmnet compositions

2024-12-27 13:52:56 +01:00

vdpa

vdpa/mlx5: Fix suboptimal range on iotlb iteration

2024-12-14 19:53:48 +01:00

vfio

vfio/mlx5: Align the page tracking max message size with the device capability

2024-12-14 19:54:51 +01:00

vhost

…

video

fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()

2024-12-14 19:53:42 +01:00

virt

…

virtio

…

vlynq

…

w1

…

watchdog

watchdog: rti: of: honor timeout-sec property

2024-12-14 19:54:32 +01:00

xen

xen: Fix the issue of resource not being properly released in xenbus_dev_probe()

2024-12-14 19:53:54 +01:00

zorro

…

Kconfig

…

Makefile

…