CoreSight

coresight@lists.linaro.org

4 participants
2387 discussions

[PATCH] coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()

by Sai Prakash Ranjan

commit 6f755e85c332 ("coresight: Add helper for inserting synchronization packets") removed trailing '\0' from barrier_pkt array and updated the call sites like etb_update_buffer() to have proper checks for barrier_pkt size before read but missed updating tmc_update_etf_buffer() which still reads barrier_pkt past the array size resulting in KASAN out-of-bounds bug. Fix this by adding a check for barrier_pkt size before accessing like it is done in etb_update_buffer(). BUG: KASAN: global-out-of-bounds in tmc_update_etf_buffer+0x4b8/0x698 Read of size 4 at addr ffffffd05b7d1030 by task perf/2629 Call trace: dump_backtrace+0x0/0x27c show_stack+0x20/0x2c dump_stack+0x11c/0x188 print_address_description+0x3c/0x4a4 __kasan_report+0x140/0x164 kasan_report+0x10/0x18 __asan_report_load4_noabort+0x1c/0x24 tmc_update_etf_buffer+0x4b8/0x698 etm_event_stop+0x248/0x2d8 etm_event_del+0x20/0x2c event_sched_out+0x214/0x6f0 group_sched_out+0xd0/0x270 ctx_sched_out+0x2ec/0x518 __perf_event_task_sched_out+0x4fc/0xe6c __schedule+0x1094/0x16a0 preempt_schedule_irq+0x88/0x170 arm64_preempt_schedule_irq+0xf0/0x18c el1_irq+0xe8/0x180 perf_event_exec+0x4d8/0x56c setup_new_exec+0x204/0x400 load_elf_binary+0x72c/0x18c0 search_binary_handler+0x13c/0x420 load_script+0x500/0x6c4 search_binary_handler+0x13c/0x420 exec_binprm+0x118/0x654 __do_execve_file+0x77c/0xba4 __arm64_compat_sys_execve+0x98/0xac el0_svc_common+0x1f8/0x5e0 el0_svc_compat_handler+0x84/0xb0 el0_svc_compat+0x10/0x50 The buggy address belongs to the variable: barrier_pkt+0x10/0x40 Memory state around the buggy address: ffffffd05b7d0f00: fa fa fa fa 04 fa fa fa fa fa fa fa 00 00 00 00 ffffffd05b7d0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffffffd05b7d1000: 00 00 00 00 00 00 fa fa fa fa fa fa 00 00 00 03 ^ ffffffd05b7d1080: fa fa fa fa 00 02 fa fa fa fa fa fa 03 fa fa fa ffffffd05b7d1100: fa fa fa fa 00 00 00 00 05 fa fa fa fa fa fa fa ================================================================== Fixes: 6f755e85c332 ("coresight: Add helper for inserting synchronization packets") Cc: stable(a)vger.kernel.org Signed-off-by: Sai Prakash Ranjan <saiprakash.ranjan(a)codeaurora.org> --- drivers/hwtracing/coresight/coresight-tmc-etf.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/hwtracing/coresight/coresight-tmc-etf.c b/drivers/hwtracing/coresight/coresight-tmc-etf.c index 45b85edfc690..cd0fb7bfba68 100644 --- a/drivers/hwtracing/coresight/coresight-tmc-etf.c +++ b/drivers/hwtracing/coresight/coresight-tmc-etf.c @@ -530,7 +530,7 @@ static unsigned long tmc_update_etf_buffer(struct coresight_device *csdev, buf_ptr = buf->data_pages[cur] + offset; *buf_ptr = readl_relaxed(drvdata->base + TMC_RRD); - if (lost && *barrier) { + if (lost && i < CORESIGHT_BARRIER_PKT_SIZE) { *buf_ptr = *barrier; barrier++; } -- QUALCOMM INDIA, on behalf of Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum, hosted by The Linux Foundation

4 years, 1 month

United nations

by Michael Jurgen

Dear, coresight

4 years, 1 month

【重要】カード情報更新のお知らせ

by Amazon.co.jp

請求先住所が変更鹿児島県西之表市の馬毛島への自衛隊基地建設を巡り、塩田康一知事がに終わったなって思い国に島周辺での海上ボーリング調査を許可したことは違法だとして、地元漁業者が許可の取り消しを求めた訴訟の判決で、鹿児島地裁（古谷健二郎裁判長）は24日、訴えを却下した。湾など限られた海域なら説得力もある訴訟かもしれないが　海洋地域調に終わったなって思い査だから　漁場はそこに限られた物じゃス感染症が拡大してないと言う判断でしょうね

4 years, 1 month

📌Re: Custom Clothing

by Daniel Smith

[ ]( # ) [ ]( # ) [ ]( # ) [ ]( # ) Good Afternoon, Wanted to reach out to you about private label manufacturing for, we are PPAI and SAGE suppliers: T-Shirts / Polo Shirts / Tanks Jackets / Hoodies / Vests Gym, Yoga and Running Apparel Promotional Apparel Sublimated Apparel Towels, Bags, Socks, and Hats Cotton Masks / Sublimated Masks We have offices in the USA, UK, Australia, India, and China. We can ship globally for you and also help you with all your designs and make pre-production samples for quality and size check. Our MOQ is 500 pcs. We have the best price guarantee. Let me know if you have any questions Thanks in advance, Daniel Smith - Director of Marketing @Oasis Apparel HQ: Beverly Hills, CA 90211, USA W: https://www.oasisapparelusa.org/ [ ]( # ) This email was sent to coresight(a)lists.linaro.org You received this email because you are registered with Alanic International [ Unsubscribe here ]( https://r.diozgroupus.info/mk/un/XSlF2MrcizzFoQ1auzqrl0dV4Jtw7MtLsaNSn7z6yG… ) [ ]( # ) © 2021 Alanic International

4 years, 1 month

United nations

by Michael Jurgen

Dear, coresight

4 years, 1 month

Hi i will like to know you

by Gonzalez’ Malian

Dear, coresight

4 years, 1 month

Consulta Formación Bonificable

by info5＠foescoformacion.es

Buenos días Desde FOESCO (Formación Estatal Continua) estamos informando a todas las empresas españolas acerca de los Cursos Bonificables disponibles para empleados en activo o en situación de ERTE. Todos los cursos impartidos son bonificables con cargo al Crédito de Formación 2021. Rogamos nos respondan a este mismo correo electrónico eligiendo una de las opciones que a continuación indicamos: 1 - Precisamos información para la PRESENTE convocatoria MAYO 2021. 2 - Precisamos información para la convocatoria del mes de JULIO 2021. 3 - Precisamos información para la convocatoria del mes de SEPTIEMBRE 2021. 4 - Precisamos información para la ÚLTIMA convocatoria NOVIEMBRE 2021. 5 - Precisamos información para el año 2022. 6 - No precisamos ninguna información BAJA (AVISO: Indicando esta opción tenga en cuenta que no volverá a recibir ninguna información en un futuro) Recordamos que el Crédito de Formación únicamente puede utilizarse en el mismo año en curso. Quedamos a la espera de su respuesta. Un cordial saludo. Alex Pons. Director FOESCO. FOESCO Formación Estatal Continua e-mail: cursos(a)foesco.net Tel.: 91 032 37 94 (Horario de 9h a 14h y de 16:30h a 21h de Lunes a Viernes) FOESCO ofrece formación a empresas y trabajadores en activo a través de cursos bonificables por la Fundación Estatal para la Formación en el Empleo (antiguo FORCEM) que gestiona las acciones formativas de FORMACIÓN CONTINUA para trabajadores y se rige por la ley 30/2015 de 9 de Septiembre. Antes de imprimir este e-mail piense bien si es necesario hacerlo. Before printing this e-mail please think twice if you really need it. FOESCO Tfno: 910 382 880 Email: cursos(a)foesco.com. La información transmitida en este mensaje está dirigida solamente a las personas o entidades que figuran en el encabezamiento y contiene información confidencial, por lo que, si usted lo recibiera por error, por favor destrúyalo sin copiarlo, usarlo ni distribuirlo, comunicándolo inmediatamente al emisor del mensaje. De conformidad con lo dispuesto en el Reglamento Europeo del 2016/679, del 27 de Abril de 2016, FOESCO le informa que los datos por usted suministrados serán tratados con las medidas de seguridad conformes a la normativa vigente que se requiere. Dichos datos serán empleados con fines de gestión. Para el ejercicio de sus derechos de transparencia, información, acceso, rectificación, supresión o derecho al olvido, limitación del tratamiento , portabilidad de datos y oposición de sus datos de carácter personal deberá dirigirse a la dirección del Responsable del tratamiento a C/ LAGUNA DEL MARQUESADO Nº10, 28021, MADRID, "PULSANDO AQUI" <mailto:bajas@foesco.com?Subject=BAJA%20CORREOS> y "ENVIAR" o a través de la dirección de correo electrónico: bajas(a)foesco.com <mailto:bajas@foesco.com?Subject=BAJA%20CORREOS>

4 years, 1 month

[PATCH v1 1/1] coresight: core: Switch to krealloc_array()

by Andy Shevchenko

Let the krealloc_array() check for multiplication overflow. Signed-off-by: Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> --- drivers/hwtracing/coresight/coresight-core.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/hwtracing/coresight/coresight-core.c b/drivers/hwtracing/coresight/coresight-core.c index 6c68d34d956e..a7971c68b0be 100644 --- a/drivers/hwtracing/coresight/coresight-core.c +++ b/drivers/hwtracing/coresight/coresight-core.c @@ -1730,9 +1730,9 @@ char *coresight_alloc_device_name(struct coresight_dev_list *dict, if (idx < 0) { /* Make space for the new entry */ idx = dict->nr_idx; - list = krealloc(dict->fwnode_list, - (idx + 1) * sizeof(*dict->fwnode_list), - GFP_KERNEL); + list = krealloc_array(dict->fwnode_list, + idx + 1, sizeof(*dict->fwnode_list), + GFP_KERNEL); if (ZERO_OR_NULL_PTR(list)) { idx = -ENOMEM; goto done; -- 2.30.2

4 years, 1 month

📌Re: Custom Apparel

by Olivia Smith

Good Day, Can you put me in contact with your purchasing team about Custom apparel, uniform, and promotional items projects for your Company? Based in Los Angeles, we are one of the largest custom clothing manufacturers that recruit more than 1500 workers in our factory. We currently work with the Top Fortune 500 companies and would love to discuss how we can help you with your apparel branding and provide custom apparel / promotional products for your company. Items we manufacture: T-Shirts Hoodies Jackets Activewear Towels Bags, clutches, and pouches Hats Promotional items Custom Cotton Masks Sublimated Apparel Sports Uniform We are very creative, innovative, and offer you a full design team and direct factory which means you save 30-40% on your cost. Everything manufactured is very high quality, 100% customizable and made-to-order, and at a very competitive price. If you would like a sample of our work feel free to reach out. -- Olivia Smith - Director of Marketing @Oasis Apparel HQ: Beverly Hills, CA 90211, USA W: https://www.oasisapparelusa.org/

4 years, 1 month

RayBan Sunglasses on Sale - Up to 80% off Online.

by Ray Ban

No Images? Online Version We offer free standard ground shipping valid on orders of $50.00 or more on our website. Click here to unsubscribe. Ray Ban, Customer Support, Attn: E-mail Database, 13691 Gavina Ave UNIT 648, Sylmar, CA 91342

4 years, 1 month

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

CoreSight