diff mbox series

[5.15,030/530] HID: multitouch: Add memory barriers

Message ID	20221024113046.363428590@linuxfoundation.org
State	New
Headers	Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; From: Greg Kroah-Hartman <gregkh@linuxfoundation.org> To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>, stable@vger.kernel.org, Andri Yngvason <andri@yngvason.is>, Benjamin Tissoires <benjamin.tissoires@redhat.com> Subject: [PATCH 5.15 030/530] HID: multitouch: Add memory barriers Date: Mon, 24 Oct 2022 13:26:14 +0200 Message-Id: <20221024113046.363428590@linuxfoundation.org> In-Reply-To: <20221024113044.976326639@linuxfoundation.org> References: <20221024113044.976326639@linuxfoundation.org> User-Agent: quilt/0.67 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Precedence: bulk
Series	None \| [5.15,002/530] ALSA: oss: Fix potential deadlock at unregistration [5.15,003/530] ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() [5.15,004/530] ALSA: usb-audio: Fix potential memory leaks [5.15,005/530] ALSA: usb-audio: Fix NULL dererence at error path [5.15,006/530] ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 [5.15,007/530] ALSA: hda/realtek: Correct pin configs for ASUS G533Z [5.15,008/530] ALSA: hda/realtek: Add quirk for ASUS GV601R laptop [5.15,009/530] ALSA: hda/realtek: Add Intel Reference SSID to support headset keys [5.15,010/530] mtd: rawnand: atmel: Unmap streaming DMA mappings [5.15,011/530] io_uring/net: dont update msg_name if not provided [5.15,012/530] hv_netvsc: Fix race between VF offering and VF association message from host [5.15,013/530] cifs: destage dirty pages before re-reading them for cache=none [5.15,014/530] cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message [5.15,015/530] iio: dac: ad5593r: Fix i2c read protocol requirements [5.15,016/530] iio: ltc2497: Fix reading conversion results [5.15,017/530] iio: adc: ad7923: fix channel readings for some variants [5.15,018/530] iio: pressure: dps310: Refactor startup procedure [5.15,019/530] iio: pressure: dps310: Reset chip after timeout [5.15,020/530] xhci: dbc: Fix memory leak in xhci_alloc_dbc() [5.15,021/530] usb: add quirks for Lenovo OneLink+ Dock [5.15,022/530] can: kvaser_usb: Fix use of uninitialized completion [5.15,023/530] can: kvaser_usb_leaf: Fix overread with an invalid command [5.15,024/530] can: kvaser_usb_leaf: Fix TX queue out of sync after restart [5.15,025/530] can: kvaser_usb_leaf: Fix CAN state after restart [5.15,026/530] mmc: sdhci-sprd: Fix minimum clock limit [5.15,027/530] i2c: designware: Fix handling of real but unexpected device interrupts [5.15,028/530] fs: dlm: fix race between test_bit() and queue_work() [5.15,029/530] fs: dlm: handle -EBUSY first in lock arg validation [5.15,030/530] HID: multitouch: Add memory barriers [5.15,031/530] quota: Check next/prev free block number after reading from quota file [5.15,032/530] platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure [5.15,033/530] ASoC: wcd9335: fix order of Slimbus unprepare/disable [5.15,034/530] ASoC: wcd934x: fix order of Slimbus unprepare/disable [5.15,035/530] hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API [5.15,036/530] net: thunderbolt: Enable DMA paths only after rings are enabled [5.15,037/530] regulator: qcom_rpm: Fix circular deferral regression [5.15,038/530] arm64: topology: move store_cpu_topology() to shared code [5.15,039/530] riscv: topology: fix default topology reporting [5.15,040/530] RISC-V: Make port I/O string accessors actually work [5.15,041/530] parisc: fbdev/stifb: Align graphics memory size to 4MB [5.15,042/530] riscv: Allow PROT_WRITE-only mmap() [5.15,043/530] riscv: Make VM_WRITE imply VM_READ [5.15,044/530] riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb [5.15,045/530] riscv: Pass -mno-relax only on lld < 15.0.0 [5.15,046/530] UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK [5.15,047/530] nvmem: core: Fix memleak in nvmem_register() [5.15,048/530] nvme-multipath: fix possible hang in live ns resize with ANA access [5.15,049/530] nvme-pci: set min_align_mask before calculating max_hw_sectors [5.15,050/530] Revert "drm/amdgpu: use dirty framebuffer helper" [5.15,051/530] dmaengine: mxs: use platform_driver_register [5.15,052/530] drm/virtio: Check whether transferred 2D BO is shmem [5.15,053/530] drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error [5.15,054/530] drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() [5.15,055/530] drm/udl: Restore display mode on resume [5.15,056/530] arm64: errata: Add Cortex-A55 to the repeat tlbi list [5.15,057/530] mm/damon: validate if the pmd entry is present before accessing [5.15,058/530] mm/mmap: undo ->mmap() when arch_validate_flags() fails [5.15,059/530] xen/gntdev: Prevent leaking grants [5.15,060/530] xen/gntdev: Accommodate VMA splitting [5.15,061/530] PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge [5.15,062/530] serial: 8250: Let drivers request full 16550A feature probing [5.15,063/530] serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices [5.15,064/530] NFSD: Protect against send buffer overflow in NFSv3 READDIR [5.15,065/530] NFSD: Protect against send buffer overflow in NFSv2 READ [5.15,066/530] NFSD: Protect against send buffer overflow in NFSv3 READ [5.15,067/530] powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain [5.15,068/530] powerpc/boot: Explicitly disable usage of SPE instructions [5.15,069/530] slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure [5.15,070/530] slimbus: qcom-ngd: cleanup in probe error path [5.15,071/530] scsi: qedf: Populate sysfs attributes for vport [5.15,072/530] gpio: rockchip: request GPIO mux to pinctrl when setting direction [5.15,073/530] pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback [5.15,074/530] fbdev: smscufx: Fix use-after-free in ufx_ops_open() [5.15,075/530] ksmbd: fix endless loop when encryption for response fails [5.15,076/530] ksmbd: Fix wrong return value and message length check in smb2_ioctl() [5.15,077/530] ksmbd: Fix user namespace mapping [5.15,078/530] fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE [5.15,079/530] btrfs: fix race between quota enable and quota rescan ioctl [5.15,080/530] btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer [5.15,081/530] f2fs: complete checkpoints during remount [5.15,082/530] f2fs: flush pending checkpoints when freezing super [5.15,083/530] f2fs: increase the limit for reserve_root [5.15,084/530] f2fs: fix to do sanity check on destination blkaddr during recovery [5.15,085/530] f2fs: fix to do sanity check on summary info [5.15,086/530] hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO [5.15,087/530] hardening: Remove Clangs enable flag for -ftrivial-auto-var-init=zero [5.15,088/530] jbd2: wake up journal waiters in FIFO order, not LIFO [5.15,089/530] jbd2: fix potential buffer head reference count leak [5.15,090/530] jbd2: fix potential use-after-free in jbd2_fc_wait_bufs [5.15,091/530] jbd2: add miss release buffer head in fc_do_one_pass() [5.15,092/530] ext4: avoid crash when inline data creation follows DIO write [5.15,093/530] ext4: fix null-ptr-deref in ext4_write_info [5.15,094/530] ext4: make ext4_lazyinit_thread freezable [5.15,095/530] ext4: fix check for block being out of directory size [5.15,096/530] ext4: dont increase iversion counter for ea_inodes [5.15,097/530] ext4: ext4_read_bh_lock() should submit IO if the buffer isnt uptodate [5.15,098/530] ext4: place buffer head allocation before handle start [5.15,099/530] ext4: fix dir corruption when ext4_dx_add_entry() fails [5.15,100/530] ext4: fix miss release buffer head in ext4_fc_write_inode [5.15,101/530] ext4: fix potential memory leak in ext4_fc_record_modified_inode() [5.15,102/530] ext4: fix potential memory leak in ext4_fc_record_regions() [5.15,103/530] ext4: update state->fc_regions_size after successful memory allocation [5.15,104/530] livepatch: fix race between fork and KLP transition [5.15,105/530] ftrace: Properly unset FTRACE_HASH_FL_MOD [5.15,106/530] ring-buffer: Allow splice to read previous partially read pages [5.15,107/530] ring-buffer: Have the shortest_full queue be the shortest not longest [5.15,108/530] ring-buffer: Check pending waiters when doing wake ups as well [5.15,109/530] ring-buffer: Add ring_buffer_wake_waiters() [5.15,110/530] ring-buffer: Fix race between reset page and reading page [5.15,111/530] tracing: Disable interrupt or preemption before acquiring arch_spinlock_t [5.15,112/530] tracing: Wake up ring buffer waiters on closing of the file [5.15,113/530] tracing: Wake up waiters when tracing is disabled [5.15,114/530] tracing: Add ioctl() to force ring buffer waiters to wake up [5.15,115/530] tracing: Move duplicate code of trace_kprobe/eprobe.c into header [5.15,116/530] tracing: Add "(fault)" name injection to kernel probes [5.15,117/530] tracing: Fix reading strings from synthetic events [5.15,118/530] thunderbolt: Explicitly enable lane adapter hotplug events at startup [5.15,119/530] efi: libstub: drop pointless get_memory_map() call [5.15,120/530] media: cedrus: Set the platform driver data earlier [5.15,121/530] media: cedrus: Fix endless loop in cedrus_h265_skip_bits() [5.15,122/530] blk-wbt: call rq_qos_add() after wb_normal is initialized [5.15,123/530] KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility [5.15,124/530] KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" [5.15,125/530] KVM: nVMX: Dont propagate vmcs12s PERF_GLOBAL_CTRL settings to vmcs02 [5.15,126/530] KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS [5.15,127/530] staging: greybus: audio_helper: remove unused and wrong debugfs usage [5.15,128/530] drm/nouveau/kms/nv140-: Disable interlacing [5.15,129/530] drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() [5.15,130/530] drm/i915: Fix watermark calculations for gen12+ RC CCS modifier [5.15,131/530] drm/i915: Fix watermark calculations for gen12+ MC CCS modifier [5.15,132/530] drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier [5.15,133/530] drm/amd/display: Fix vblank refcount in vrr transition [5.15,134/530] smb3: must initialize two ACL struct fields to zero [5.15,135/530] selinux: use "grep -E" instead of "egrep" [5.15,136/530] ima: fix blocking of security.ima xattrs of unsupported algorithms [5.15,137/530] userfaultfd: open userfaultfds with O_RDONLY [5.15,138/530] ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers [5.15,139/530] thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() [5.15,140/530] sh: machvec: Use char[] for section boundaries [5.15,141/530] MIPS: SGI-IP27: Free some unused memory [5.15,142/530] MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() [5.15,143/530] ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() [5.15,144/530] ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE [5.15,145/530] objtool: Preserve special st_shndx indexes in elf_update_symbol [5.15,146/530] nfsd: Fix a memory leak in an error handling path [5.15,147/530] SUNRPC: Fix svcxdr_init_decodes end-of-buffer calculation [5.15,148/530] SUNRPC: Fix svcxdr_init_encodes buflen calculation [5.15,149/530] NFSD: Protect against send buffer overflow in NFSv2 READDIR [5.15,150/530] NFSD: Fix handling of oversized NFSv4 COMPOUND requests [5.15,151/530] wifi: rtlwifi: 8192de: correct checking of IQK reload [5.15,152/530] wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() [5.15,153/530] leds: lm3601x: Dont use mutex after it was destroyed [5.15,154/530] bpf: Fix reference state management for synchronous callbacks [5.15,155/530] wifi: mac80211: allow bw change during channel switch in mesh [5.15,156/530] bpftool: Fix a wrong type cast in btf_dumper_int [5.15,157/530] spi: mt7621: Fix an error message in mt7621_spi_probe() [5.15,158/530] x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch reg… [5.15,159/530] xsk: Fix backpressure mechanism on Tx [5.15,160/530] bpf: Disable preemption when increasing per-cpu map_locked [5.15,161/530] bpf: Propagate error from htab_lock_bucket() to userspace [5.15,162/530] bpf: Use this_cpu_{inc\|dec\|inc_return} for bpf_task_storage_busy [5.15,163/530] Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend [5.15,164/530] wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() [5.15,165/530] wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() [5.15,166/530] selftests/xsk: Avoid use-after-free on ctx [5.15,167/530] spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() [5.15,168/530] spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() [5.15,169/530] wifi: rtl8xxxu: Fix skb misuse in TX queue selection [5.15,170/530] spi: meson-spicc: do not rely on busy flag in pow2 clk ops [5.15,171/530] bpf: btf: fix truncated last_member_type_id in btf_struct_resolve [5.15,172/530] wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration [5.15,173/530] wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask [5.15,174/530] wifi: mt76: sdio: fix transmitting packet hangs [5.15,175/530] wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload [5.15,176/530] wifi: mt76: mt7915: do not check state before configuring implicit beamform [5.15,177/530] Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release [5.15,178/530] net: fs_enet: Fix wrong check in do_pd_setup [5.15,179/530] bpf: Ensure correct locking around vulnerable function find_vpid() [5.15,180/530] Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure [5.15,181/530] netfilter: conntrack: fix the gc rescheduling delay [5.15,182/530] netfilter: conntrack: revisit the gc initial rescheduling bias [5.15,183/530] wifi: ath11k: fix number of VHT beamformee spatial streams [5.15,184/530] x86/microcode/AMD: Track patch allocation size explicitly [5.15,185/530] x86/cpu: Include the header of init_ia32_feat_ctl()s prototype [5.15,186/530] spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe [5.15,187/530] spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe [5.15,188/530] skmsg: Schedule psock work if the cached skb exists on the psock [5.15,189/530] i2c: mlxbf: support lock mechanism [5.15,190/530] Bluetooth: hci_core: Fix not handling link timeouts propertly [5.15,191/530] xfrm: Reinject transport-mode packets through workqueue [5.15,192/530] netfilter: nft_fib: Fix for rpath check with VRF devices [5.15,193/530] spi: s3c64xx: Fix large transfers with DMA [5.15,194/530] wifi: rtl8xxxu: Fix AIFS written to REG_EDCA__PARAM [5.15,195/530] vhost/vsock: Use kvmalloc/kvfree for larger packets. [5.15,196/530] eth: alx: take rtnl_lock on resume [5.15,197/530] mISDN: fix use-after-free bugs in l1oip timer handlers [5.15,198/530] sctp: handle the error returned from sctp_auth_asoc_init_active_key [5.15,199/530] tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited [5.15,200/530] spi: Ensure that sg_table wont be used after being freed [5.15,201/530] hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller [5.15,202/530] net: rds: dont hold sock lock when cancelling work from rds_tcp_reset_callbacks() [5.15,203/530] bnx2x: fix potential memory leak in bnx2x_tpa_stop() [5.15,204/530] net: wwan: iosm: Call mutex_init before locking it [5.15,205/530] net/ieee802154: reject zero-sized raw_sendmsg() [5.15,206/530] once: add DO_ONCE_SLOW() for sleepable contexts [5.15,207/530] net: mvpp2: fix mvpp2 debugfs leak [5.15,208/530] drm: bridge: adv7511: fix CEC power down control register offset [5.15,209/530] drm: bridge: adv7511: unregister cec i2c device after cec adapter [5.15,210/530] drm/bridge: Avoid uninitialized variable warning [5.15,211/530] drm/mipi-dsi: Detach devices when removing the host [5.15,212/530] drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling [5.15,213/530] drm/bridge: parade-ps8640: Fix regulator supply order [5.15,214/530] drm/dp_mst: fix drm_dp_dpcd_read return value checks [5.15,215/530] drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() [5.15,216/530] ASoC: mt6359: fix tests for platform_get_irq() failure [5.15,217/530] platform/chrome: fix double-free in chromeos_laptop_prepare() [5.15,218/530] platform/chrome: fix memory corruption in ioctl [5.15,219/530] ASoC: tas2764: Allow mono streams [5.15,220/530] ASoC: tas2764: Drop conflicting set_bias_level power setting [5.15,221/530] ASoC: tas2764: Fix mute/unmute [5.15,222/530] platform/x86: msi-laptop: Fix old-ec check for backlight registering [5.15,223/530] platform/x86: msi-laptop: Fix resource cleanup [5.15,224/530] platform/chrome: cros_ec_typec: Correct alt mode index [5.15,225/530] drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() [5.15,226/530] drm/bridge: megachips: Fix a null pointer dereference bug [5.15,227/530] ASoC: rsnd: Add check for rsnd_mod_power_on [5.15,228/530] ALSA: hda: beep: Simplify keep-power-at-enable behavior [5.15,229/530] drm/bochs: fix blanking [5.15,230/530] drm/omap: dss: Fix refcount leak bugs [5.15,231/530] drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() [5.15,232/530] mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() [5.15,233/530] ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API [5.15,234/530] drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx [5.15,235/530] drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() [5.15,236/530] drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() [5.15,237/530] ASoC: codecs: tx-macro: fix kcontrol put [5.15,238/530] ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() [5.15,239/530] ALSA: dmaengine: increment buffer pointer atomically [5.15,240/530] mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() [5.15,241/530] ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe [5.15,242/530] ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe [5.15,243/530] ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe [5.15,244/530] ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe [5.15,245/530] ALSA: hda/hdmi: Dont skip notification handling during PM operation [5.15,246/530] memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() [5.15,247/530] memory: of: Fix refcount leak bug in of_get_ddr_timings() [5.15,248/530] memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() [5.15,249/530] locks: fix TOCTOU race when granting write lease [5.15,250/530] soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() [5.15,251/530] soc: qcom: smem_state: Add refcounting for the state->of_node [5.15,252/530] ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus [5.15,253/530] ARM: dts: turris-omnia: Fix mpp26 pin name and comment [5.15,254/530] ARM: dts: kirkwood: lsxl: fix serial line [5.15,255/530] ARM: dts: kirkwood: lsxl: remove first ethernet port [5.15,256/530] ia64: export memory_add_physaddr_to_nid to fix cxl build error [5.15,257/530] soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA [5.15,258/530] arm64: dts: ti: k3-j7200: fix main pinmux range [5.15,259/530] ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family [5.15,260/530] ARM: Drop CMDLINE_ dependency on ATAGS [5.15,261/530] ext4: dont run ext4lazyinit for read-only filesystems [5.15,262/530] arm64: ftrace: fix module PLTs with mcount [5.15,263/530] ARM: dts: exynos: fix polarity of VBUS GPIO of Origen [5.15,264/530] iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX [5.15,265/530] iio: adc: at91-sama5d2_adc: check return status for pressure and touch [5.15,266/530] iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq [5.15,267/530] iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume [5.15,268/530] iio: inkern: only release the device node when done with it [5.15,269/530] iio: inkern: fix return value in devm_of_iio_channel_get_by_name() [5.15,270/530] iio: ABI: Fix wrong format of differential capacitance channel ABI. [5.15,271/530] iio: magnetometer: yas530: Change data type of hard_offsets to signed [5.15,272/530] RDMA/mlx5: Dont compare mkey tags in DEVX indirect mkey [5.15,273/530] usb: common: debug: Check non-standard control requests [5.15,274/530] clk: meson: Hold reference returned by of_get_parent() [5.15,275/530] clk: oxnas: Hold reference returned by of_get_parent() [5.15,276/530] clk: qoriq: Hold reference returned by of_get_parent() [5.15,277/530] clk: berlin: Add of_node_put() for of_get_parent() [5.15,278/530] clk: sprd: Hold reference returned by of_get_parent() [5.15,279/530] clk: tegra: Fix refcount leak in tegra210_clock_init [5.15,280/530] clk: tegra: Fix refcount leak in tegra114_clock_init [5.15,281/530] clk: tegra20: Fix refcount leak in tegra20_clock_init [5.15,282/530] HSI: omap_ssi: Fix refcount leak in ssi_probe [5.15,283/530] HSI: omap_ssi_port: Fix dma_map_sg error check [5.15,284/530] media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop [5.15,285/530] tty: xilinx_uartps: Fix the ignore_status [5.15,286/530] media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() [5.15,287/530] media: uvcvideo: Fix memory leak in uvc_gpio_parse [5.15,288/530] media: uvcvideo: Use entity get_cur in uvc_ctrl_set [5.15,289/530] media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init [5.15,290/530] RDMA/rxe: Fix "kernel NULL pointer dereference" error [5.15,291/530] RDMA/rxe: Fix the error caused by qp->sk [5.15,292/530] misc: ocxl: fix possible refcount leak in afu_ioctl() [5.15,293/530] fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() [5.15,294/530] dmaengine: hisilicon: Disable channels when unregister hisi_dma [5.15,295/530] dmaengine: hisilicon: Fix CQ head update [5.15,296/530] dmaengine: hisilicon: Add multi-thread support for a DMA channel [5.15,297/530] dyndbg: fix static_branch manipulation [5.15,298/530] dyndbg: fix module.dyndbg handling [5.15,299/530] dyndbg: let query-modname override actual module name [5.15,300/530] dyndbg: drop EXPORTed dynamic_debug_exec_queries [5.15,301/530] clk: qcom: sm6115: Select QCOM_GDSC [5.15,302/530] mtd: devices: docg3: check the return value of devm_ioremap() in the probe [5.15,303/530] phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_pare… [5.15,304/530] phy: phy-mtk-tphy: fix the phy type setting issue [5.15,305/530] mtd: rawnand: intel: Read the chip-select line from the correct OF node [5.15,306/530] mtd: rawnand: intel: Remove undocumented compatible string [5.15,307/530] mtd: rawnand: fsl_elbc: Fix none ECC mode [5.15,308/530] RDMA/irdma: Align AE id codes to correct flush code and event [5.15,309/530] RDMA/srp: Fix srp_abort() [5.15,310/530] RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. [5.15,311/530] RDMA/siw: Fix QP destroy to wait for all references dropped. [5.15,312/530] ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() [5.15,313/530] ata: fix ata_id_has_devslp() [5.15,314/530] ata: fix ata_id_has_ncq_autosense() [5.15,315/530] ata: fix ata_id_has_dipm() [5.15,316/530] mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() [5.15,317/530] md: Replace snprintf with scnprintf [5.15,318/530] md/raid5: Ensure stripe_fill happens on non-read IO with journal [5.15,319/530] md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() [5.15,320/530] RDMA/cm: Use SLID in the work completion as the DLID in responder side [5.15,321/530] IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers [5.15,322/530] xhci: Dont show warning for reinit on known broken suspend [5.15,323/530] usb: gadget: function: fix dangling pnp_string in f_printer.c [5.15,324/530] drivers: serial: jsm: fix some leaks in probe [5.15,325/530] serial: 8250: Toggle IER bits on only after irq has been set up [5.15,326/530] tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown [5.15,327/530] phy: qualcomm: call clk_disable_unprepare in the error handling [5.15,328/530] staging: vt6655: fix some erroneous memory clean-up loops [5.15,329/530] slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON [5.15,330/530] firmware: google: Test spinlock on panic path to avoid lockups [5.15,331/530] serial: 8250: Fix restoring termios speed after suspend [5.15,332/530] scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() [5.15,333/530] scsi: iscsi: Rename iscsi_conn_queue_work() [5.15,334/530] scsi: iscsi: Add recv workqueue helpers [5.15,335/530] scsi: iscsi: Run recv path from workqueue [5.15,336/530] scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() [5.15,337/530] clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical [5.15,338/530] clk: qcom: gcc-sm6115: Override default Alpha PLL regs [5.15,339/530] RDMA/rxe: Fix resize_finish() in rxe_queue.c [5.15,340/530] fsi: core: Check error number after calling ida_simple_get [5.15,341/530] mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() [5.15,342/530] mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() [5.15,343/530] mfd: lp8788: Fix an error handling path in lp8788_probe() [5.15,344/530] mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() [5.15,345/530] mfd: fsl-imx25: Fix check for platform_get_irq() errors [5.15,346/530] mfd: sm501: Add check for platform_driver_register() [5.15,347/530] clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent [5.15,348/530] dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() [5.15,349/530] usb: mtu3: fix failed runtime suspend in host only mode [5.15,350/530] spmi: pmic-arb: correct duplicate APID to PPID mapping logic [5.15,351/530] clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD [5.15,352/530] clk: baikal-t1: Fix invalid xGMAC PTP clock divider [5.15,353/530] clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent [5.15,354/530] clk: baikal-t1: Add SATA internal ref clock buffer [5.15,355/530] clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration [5.15,356/530] clk: imx: scu: fix memleak on platform_device_add() fails [5.15,357/530] clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe [5.15,358/530] clk: ast2600: BCLK comes from EPLL [5.15,359/530] mailbox: mpfs: fix handling of the reg property [5.15,360/530] mailbox: mpfs: account for mbox offsets while sending [5.15,361/530] mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg [5.15,362/530] powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig [5.15,363/530] powerpc/math_emu/efp: Include module.h [5.15,364/530] powerpc/sysdev/fsl_msi: Add missing of_node_put() [5.15,365/530] powerpc/pci_dn: Add missing of_node_put() [5.15,366/530] powerpc/powernv: add missing of_node_put() in opal_export_attrs() [5.15,367/530] powerpc: Fix fallocate and fadvise64_64 compat parameter combination [5.15,368/530] x86/hyperv: Fix struct hv_enlightened_vmcs definition [5.15,369/530] powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 [5.15,370/530] powerpc: Fix SPE Power ISA properties for e500v1 platforms [5.15,371/530] powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() [5.15,372/530] powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL [5.15,373/530] crypto: sahara - dont sleep when in softirq [5.15,374/530] crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr [5.15,375/530] hwrng: arm-smccc-trng - fix NO_ENTROPY handling [5.15,376/530] cgroup: Honor callers cgroup NS when resolving path [5.15,377/530] hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() [5.15,378/530] crypto: qat - fix default value of WDT timer [5.15,379/530] crypto: hisilicon/qm - fix missing put dfx access [5.15,380/530] cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset [5.15,381/530] iommu/omap: Fix buffer overflow in debugfs [5.15,382/530] crypto: akcipher - default implementation for setting a private key [5.15,383/530] crypto: ccp - Release dma channels before dmaengine unrgister [5.15,384/530] crypto: inside-secure - Change swab to swab32 [5.15,385/530] crypto: qat - fix DMA transfer direction [5.15,386/530] cifs: return correct error in ->calc_signature() [5.15,387/530] iommu/iova: Fix module config properly [5.15,388/530] tracing: kprobe: Fix kprobe event gen test module on exit [5.15,389/530] tracing: kprobe: Make gen test module work in arm and riscv [5.15,390/530] tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads [5.15,391/530] kbuild: remove the target in signal traps when interrupted [5.15,392/530] kbuild: rpm-pkg: fix breakage when V=1 is used [5.15,393/530] crypto: marvell/octeontx - prevent integer overflows [5.15,394/530] crypto: cavium - prevent integer overflow loading firmware [5.15,395/530] thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id [5.15,396/530] ACPI: APEI: do not add task_work to kernel thread to avoid memory leak [5.15,397/530] f2fs: fix race condition on setting FI_NO_EXTENT flag [5.15,398/530] f2fs: fix to account FS_CP_DATA_IO correctly [5.15,399/530] selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle [5.15,400/530] fs: dlm: fix race in lowcomms [5.15,401/530] rcu: Avoid triggering strict-GP irq-work when RCU is idle [5.15,402/530] rcu: Back off upon fill_page_cache_func() allocation failure [5.15,403/530] rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() [5.15,404/530] ACPI: video: Add Toshiba Satellite/Portege Z830 quirk [5.15,405/530] ACPI: tables: FPDT: Dont call acpi_os_map_memory() on invalid phys address [5.15,406/530] cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode [5.15,407/530] MIPS: BCM47XX: Cast memcmp() of function to (void *) [5.15,408/530] powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue [5.15,409/530] thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash [5.15,410/530] ARM: decompressor: Include .data.rel.ro.local [5.15,411/530] ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable [5.15,412/530] x86/entry: Work around Clang __bdos() bug [5.15,413/530] NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data [5.15,414/530] NFSD: fix use-after-free on source server when doing inter-server copy [5.15,415/530] wifi: brcmfmac: fix invalid address access when enabling SCAN log level [5.15,416/530] bpftool: Clear errno after libcaps checks [5.15,417/530] ice: set tx_tstamps when creating new Tx rings via ethtool [5.15,418/530] net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 [5.15,419/530] openvswitch: Fix double reporting of drops in dropwatch [5.15,420/530] openvswitch: Fix overreporting of drops in dropwatch [5.15,421/530] tcp: annotate data-race around tcp_md5sig_pool_populated [5.15,422/530] x86/mce: Retrieve poison range from hardware [5.15,423/530] wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() [5.15,424/530] thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround [5.15,425/530] xfrm: Update ipcomp_scratches with NULL when freed [5.15,426/530] iavf: Fix race between iavf_close and iavf_reset_task [5.15,427/530] wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() [5.15,428/530] Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk [5.15,429/530] regulator: core: Prevent integer underflow [5.15,430/530] wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value [5.15,431/530] Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() [5.15,432/530] Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times [5.15,433/530] can: bcm: check the result of can_send() in bcm_can_tx() [5.15,434/530] wifi: rt2x00: dont run Rt5592 IQ calibration on MT7620 [5.15,435/530] wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 [5.15,436/530] wifi: rt2x00: set VGC gain for both chains of MT7620 [5.15,437/530] wifi: rt2x00: set SoC wmac clock register [5.15,438/530] wifi: rt2x00: correctly set BBP register 86 for MT7620 [5.15,439/530] hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms [5.15,440/530] net: If sock is dead dont access socks sk_wq in sk_stream_wait_memory [5.15,441/530] Bluetooth: L2CAP: Fix user-after-free [5.15,442/530] r8152: Rate limit overflow messages [5.15,443/530] drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() [5.15,444/530] drm: Use size_t type for len variable in drm_copy_field() [5.15,445/530] drm: Prevent drm_copy_field() to attempt copying a NULL pointer [5.15,446/530] drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook [5.15,447/530] gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() [5.15,448/530] drm/amd/display: fix overflow on MIN_I64 definition [5.15,449/530] udmabuf: Set ubuf->sg = NULL if the creation of sg table fails [5.15,450/530] drm: bridge: dw_hdmi: only trigger hotplug event on link change [5.15,451/530] ALSA: usb-audio: Register card at the last interface [5.15,452/530] drm/vc4: vec: Fix timings for VEC modes [5.15,453/530] drm: panel-orientation-quirks: Add quirk for Anbernic Win600 [5.15,454/530] platform/chrome: cros_ec: Notify the PM of wake events during resume [5.15,455/530] platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading [5.15,456/530] ASoC: SOF: pci: Change DMI match info to support all Chrome platforms [5.15,457/530] drm/amdgpu: fix initial connector audio value [5.15,458/530] drm/meson: reorder driver deinit sequence to fix use-after-free bug [5.15,459/530] drm/meson: explicitly remove aggregate driver at module unload time [5.15,460/530] mmc: sdhci-msm: add compatible string check for sdm670 [5.15,461/530] drm/dp: Dont rewrite link config when setting phy test pattern [5.15,462/530] drm/amd/display: Remove interface for periodic interrupt 1 [5.15,463/530] ARM: dts: imx7d-sdb: config the max pressure for tsc2046 [5.15,464/530] ARM: dts: imx6q: add missing properties for sram [5.15,465/530] ARM: dts: imx6dl: add missing properties for sram [5.15,466/530] ARM: dts: imx6qp: add missing properties for sram [5.15,467/530] ARM: dts: imx6sl: add missing properties for sram [5.15,468/530] ARM: dts: imx6sll: add missing properties for sram [5.15,469/530] ARM: dts: imx6sx: add missing properties for sram [5.15,470/530] kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT [5.15,471/530] arm64: dts: imx8mq-librem5: Add bq25895 as max17055s power supply [5.15,472/530] btrfs: dump extra info if one free space cache has more bitmaps than it should [5.15,473/530] btrfs: scrub: try to fix super block errors [5.15,474/530] btrfs: dont print information about space cache or tree every remount [5.15,475/530] ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n [5.15,476/530] clk: zynqmp: Fix stack-out-of-bounds in strncpy` [5.15,477/530] media: cx88: Fix a null-ptr-deref bug in buffer_prepare() [5.15,478/530] media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc [5.15,479/530] clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate [5.15,480/530] usb: host: xhci-plat: suspend and resume clocks [5.15,481/530] usb: host: xhci-plat: suspend/resume clks for brcm [5.15,482/530] dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow [5.15,483/530] scsi: 3w-9xxx: Avoid disabling device if failing to enable it [5.15,484/530] nbd: Fix hung when signal interrupts nbd_start_device_ioctl() [5.15,485/530] iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity [5.15,486/530] power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() [5.15,487/530] staging: vt6655: fix potential memory leak [5.15,488/530] blk-throttle: prevent overflow while calculating wait time [5.15,489/530] ata: libahci_platform: Sanity check the DT child nodes number [5.15,490/530] bcache: fix set_at_max_writeback_rate() for multiple attached devices [5.15,491/530] soundwire: cadence: Dont overwrite msg->buf during write commands [5.15,492/530] soundwire: intel: fix error handling on dai registration issues [5.15,493/530] HID: roccat: Fix use-after-free in roccat_read() [5.15,494/530] eventfd: guard wake_up in eventfd fs calls as well [5.15,495/530] md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d [5.15,496/530] usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() [5.15,497/530] usb: musb: Fix musb_gadget.c rxstate overflow bug [5.15,498/530] arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes [5.15,499/530] usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug [5.15,500/530] Revert "usb: storage: Add quirk for Samsung Fit flash" [5.15,501/530] staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() [5.15,502/530] staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() [5.15,503/530] scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled [5.15,504/530] ext2: Use kvmalloc() for group descriptor array [5.15,505/530] nvme: copy firmware_rev on each init [5.15,506/530] nvmet-tcp: add bounds check on Transfer Tag [5.15,507/530] usb: idmouse: fix an uninit-value in idmouse_open [5.15,508/530] clk: bcm2835: Make peripheral PLLC critical [5.15,509/530] clk: bcm2835: Round UART input clock up [5.15,510/530] perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc [5.15,511/530] io_uring/af_unix: defer registered files gc to io_uring release [5.15,512/530] io_uring: correct pinned_vm accounting [5.15,513/530] io_uring/rw: fix short rw error handling [5.15,514/530] io_uring/rw: fix errored retry return values [5.15,515/530] io_uring/rw: fix unexpected link breakage [5.15,516/530] mm: hugetlb: fix UAF in hugetlb_handle_userfault [5.15,517/530] net: ieee802154: return -EINVAL for unknown addr type [5.15,518/530] ALSA: usb-audio: Fix last interface check for registration [5.15,519/530] blk-wbt: fix that rwb->wc is always set to 1 in wbt_init() [5.15,520/530] net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses [5.15,521/530] Revert "net/ieee802154: reject zero-sized raw_sendmsg()" [5.15,522/530] net/ieee802154: dont warn zero-sized raw_sendmsg() [5.15,523/530] drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n [5.15,524/530] Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 [5.15,525/530] Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT [5.15,526/530] lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 [5.15,527/530] ext4: continue to expand file system when the target size doesnt reach [5.15,528/530] thermal: intel_powerclamp: Use first online CPU as control_cpu [5.15,529/530] gcov: support GCC 12.1 and newer compilers [5.15,530/530] io-wq: Fix memory leak in worker creation

Commit Message

Greg KH Oct. 24, 2022, 11:26 a.m. UTC

  From: Andri Yngvason <andri@yngvason.is>

commit be6e2b5734a425941fcdcdbd2a9337be498ce2cf upstream.

This fixes broken atomic checks which cause a race between the
release-timer and processing of hid input.

I noticed that contacts were sometimes sticking, even with the "sticky
fingers" quirk enabled. This fixes that problem.

Cc: stable@vger.kernel.org
Fixes: 9609827458c3 ("HID: multitouch: optimize the sticky fingers timer")
Signed-off-by: Andri Yngvason <andri@yngvason.is>
Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Link: https://lore.kernel.org/r/20220907150159.2285460-1-andri@yngvason.is
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
 drivers/hid/hid-multitouch.c |    8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff mbox series

Patch

--- a/drivers/hid/hid-multitouch.c
+++ b/drivers/hid/hid-multitouch.c
@@ -1186,7 +1186,7 @@  static void mt_touch_report(struct hid_d
 	int contact_count = -1;
 
 	/* sticky fingers release in progress, abort */
-	if (test_and_set_bit(MT_IO_FLAGS_RUNNING, &td->mt_io_flags))
+	if (test_and_set_bit_lock(MT_IO_FLAGS_RUNNING, &td->mt_io_flags))
 		return;
 
 	scantime = *app->scantime;
@@ -1267,7 +1267,7 @@  static void mt_touch_report(struct hid_d
 			del_timer(&td->release_timer);
 	}
 
-	clear_bit(MT_IO_FLAGS_RUNNING, &td->mt_io_flags);
+	clear_bit_unlock(MT_IO_FLAGS_RUNNING, &td->mt_io_flags);
 }
 
 static int mt_touch_input_configured(struct hid_device *hdev,
@@ -1702,11 +1702,11 @@  static void mt_expired_timeout(struct ti
 	 * An input report came in just before we release the sticky fingers,
 	 * it will take care of the sticky fingers.
 	 */
-	if (test_and_set_bit(MT_IO_FLAGS_RUNNING, &td->mt_io_flags))
+	if (test_and_set_bit_lock(MT_IO_FLAGS_RUNNING, &td->mt_io_flags))
 		return;
 	if (test_bit(MT_IO_FLAGS_PENDING_SLOTS, &td->mt_io_flags))
 		mt_release_contacts(hdev);
-	clear_bit(MT_IO_FLAGS_RUNNING, &td->mt_io_flags);
+	clear_bit_unlock(MT_IO_FLAGS_RUNNING, &td->mt_io_flags);
 }
 
 static int mt_probe(struct hid_device *hdev, const struct hid_device_id *id)