greybus-dev January 2026

greybus-dev@lists.linaro.org

16 participants
17 discussions

[PATCH] staging: greybus: lights: avoid NULL deref

by Chaitanya Mishra

gb_lights_light_config() stores channel_count before allocating the channels array. If kcalloc() fails, gb_lights_release() iterates the non-zero count and dereferences light->channels, which is NULL. Allocate channels first and only then publish channels_count so the cleanup path can't walk a NULL pointer. Fixes: 2870b52bae4c ("greybus: lights: add lights implementation") Signed-off-by: Chaitanya Mishra <chaitanyamishra.ai(a)gmail.com> --- drivers/staging/greybus/light.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/staging/greybus/light.c b/drivers/staging/greybus/light.c index e509fdc715db..4c9ad9ea8827 100644 --- a/drivers/staging/greybus/light.c +++ b/drivers/staging/greybus/light.c @@ -1008,14 +1008,14 @@ static int gb_lights_light_config(struct gb_lights *glights, u8 id) if (!strlen(conf.name)) return -EINVAL; - light->channels_count = conf.channel_count; light->name = kstrndup(conf.name, NAMES_MAX, GFP_KERNEL); if (!light->name) return -ENOMEM; - light->channels = kcalloc(light->channels_count, + light->channels = kcalloc(conf.channel_count, sizeof(struct gb_channel), GFP_KERNEL); if (!light->channels) return -ENOMEM; + light->channels_count = conf.channel_count; /* First we collect all the configurations for all channels */ for (i = 0; i < light->channels_count; i++) { -- 2.50.1 (Apple Git-155)

1 week, 5 days

[PATCH] staging: greybus: audio: avoid snprintf truncation warnings

by Sun Jian

W=1 reports possible truncation when formatting widget and control names using snprintf() with a %s argument and fixed-size buffers. Build the prefixed names using scnprintf() plus strlcat() instead, so truncation, if any, is handled by the string helpers rather than during printf formatting. No functional change intended. Signed-off-by: Sun Jian <sun.jian.kdev(a)gmail.com> --- drivers/staging/greybus/audio_topology.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/drivers/staging/greybus/audio_topology.c b/drivers/staging/greybus/audio_topology.c index 76146f91cddc..4293ab899390 100644 --- a/drivers/staging/greybus/audio_topology.c +++ b/drivers/staging/greybus/audio_topology.c @@ -1087,7 +1087,8 @@ static int gbaudio_tplg_create_widget(struct gbaudio_module_info *module, /* Prefix dev_id to widget control_name */ strscpy(temp_name, w->name, sizeof(temp_name)); - snprintf(w->name, sizeof(w->name), "GB %d %s", module->dev_id, temp_name); + scnprintf(w->name, sizeof(w->name), "GB %d ", module->dev_id); + strlcat(w->name, temp_name, sizeof(w->name)); switch (w->type) { case snd_soc_dapm_spk: @@ -1169,8 +1170,8 @@ static int gbaudio_tplg_process_kcontrols(struct gbaudio_module_info *module, control->id = curr->id; /* Prefix dev_id to widget_name */ strscpy(temp_name, curr->name, sizeof(temp_name)); - snprintf(curr->name, sizeof(curr->name), "GB %d %s", module->dev_id, - temp_name); + scnprintf(curr->name, sizeof(curr->name), "GB %d ", module->dev_id); + strlcat(curr->name, temp_name, sizeof(curr->name)); control->name = curr->name; if (curr->info.type == GB_AUDIO_CTL_ELEM_TYPE_ENUMERATED) { struct gb_audio_enumerated *gbenum = -- 2.43.0

2 weeks, 1 day

[PATCH 0/2] staging: greybus: arche-platform: minor cleanups

by Holden Hsu

Holden Hsu (2): staging: greybus: arche-platform: clarify TODO comment staging: greybus: arche-platform: fix spelling mistake in comment drivers/staging/greybus/arche-platform.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) -- 2.43.0

2 weeks, 1 day

[PATCH 0/2] staging: greybus: arche-platform: minor fixes

by Hsu Holden

This patch series contains two minor cleanups for the arche-platform driver: Patch 1: Clarifies an unclear TODO comment to make the intent more obvious to future developers. Patch 2: Fixes a simple spelling mistake in a comment. These are low-risk changes that improve code readability. Get Outlook for Android<https://aka.ms/AAb9ysg>

2 weeks, 1 day

[PATCH 0/2] staging: greybus: arche-platform: minor fixes

by Hsu Holden

2 weeks, 1 day

[PATCH] staging: greybus: split gb_audio_gb_get_topology() into helper functions

by Khaled Saleh

From: khaled <khaled.saleh.req(a)gmail.com> The gb_audio_gb_get_topology() function performs multiple distinct operations: retrieving the topology size, allocating the topology buffer, and fetching the topology data. A TODO comment in the file notes that this logic should be split into separate calls. Introduce helper functions for each step and update gb_audio_gb_get_topology() to use them. This improves readability and maintainability without changing behavior. Signed-off-by: Khaled Saleh <khaled.saleh.req(a)gmail.com> --- drivers/staging/greybus/audio_gb.c | 47 +++++++++++++++++++++++------- 1 file changed, 36 insertions(+), 11 deletions(-) diff --git a/drivers/staging/greybus/audio_gb.c b/drivers/staging/greybus/audio_gb.c index 9d8994fdb41a..0d5109ec14f6 100644 --- a/drivers/staging/greybus/audio_gb.c +++ b/drivers/staging/greybus/audio_gb.c @@ -9,36 +9,61 @@ #include "audio_codec.h" /* TODO: Split into separate calls */ +static int gb_audio_topology_get_size(struct gb_connection *connection, u16 *size) +{ + struct gb_audio_get_topology_size_response resp; + int ret; + + ret = gb_operation_sync(connection, + GB_AUDIO_TYPE_GET_TOPOLOGY_SIZE, + NULL, 0, + &resp, sizeof(resp)); + if (ret) + return ret; + + *size = le16_to_cpu(resp.size); + + return 0; +} + +static struct gb_audio_topology *gb_audio_topology_alloc(u16 size) +{ + if (size < sizeof(struct gb_audio_topology)) + return NULL; + + return kzalloc(size, GFP_KERNEL); +} + +static int gb_audio_topology_fetch(struct gb_connection *connection, + struct gb_audio_topology *topo, u16 size) +{ + return gb_operation_sync(connection, + GB_AUDIO_TYPE_GET_TOPOLOGY, + NULL, 0, + topo, size); +} int gb_audio_gb_get_topology(struct gb_connection *connection, struct gb_audio_topology **topology) { - struct gb_audio_get_topology_size_response size_resp; struct gb_audio_topology *topo; u16 size; int ret; - ret = gb_operation_sync(connection, GB_AUDIO_TYPE_GET_TOPOLOGY_SIZE, - NULL, 0, &size_resp, sizeof(size_resp)); + ret = gb_audio_topology_get_size(connection, &size); if (ret) return ret; - size = le16_to_cpu(size_resp.size); - if (size < sizeof(*topo)) - return -ENODATA; - - topo = kzalloc(size, GFP_KERNEL); + topo = gb_audio_topology_alloc(size); if (!topo) return -ENOMEM; - ret = gb_operation_sync(connection, GB_AUDIO_TYPE_GET_TOPOLOGY, NULL, 0, - topo, size); + ret = gb_audio_topology_fetch(connection, topo, size); if (ret) { kfree(topo); return ret; } *topology = topo; - return 0; } EXPORT_SYMBOL_GPL(gb_audio_gb_get_topology); -- 2.43.0

2 weeks, 1 day

[PATCH] staging: greybus: replace WD_STATE_COLDBOOT_TRIG with state

by Gideon Adjei

use state temporary variable to replace WD_STATE_COLDBOOT_TRIG argument in arche_platform_set_wake_detect_state. This keeps lines under 80 columns and satisfies kernel style guidelines. Signed-off-by: Gideon Adjei <gideonadjei.dev(a)gmail.com> --- drivers/staging/greybus/arche-platform.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/drivers/staging/greybus/arche-platform.c b/drivers/staging/greybus/arche-platform.c index 8aaff4e45660..bb9b3c3c7a2d 100644 --- a/drivers/staging/greybus/arche-platform.c +++ b/drivers/staging/greybus/arche-platform.c @@ -155,6 +155,7 @@ static irqreturn_t arche_platform_wd_irq(int irq, void *devid) { struct arche_platform_drvdata *arche_pdata = devid; unsigned long flags; + int state; spin_lock_irqsave(&arche_pdata->wake_lock, flags); @@ -179,8 +180,8 @@ static irqreturn_t arche_platform_wd_irq(int irq, void *devid) */ if (arche_pdata->wake_detect_state != WD_STATE_COLDBOOT_START) { - arche_platform_set_wake_detect_state(arche_pdata, - WD_STATE_COLDBOOT_TRIG); + state = WD_STATE_COLDBOOT_TRIG; + arche_platform_set_wake_detect_state(arche_pdata, state); spin_unlock_irqrestore(&arche_pdata->wake_lock, flags); return IRQ_WAKE_THREAD; -- 2.34.1

2 weeks, 2 days

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

greybus-dev January 2026