OERV-BSP/kernel-spacemit-k1
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
fc2b447e45d57b64914aae5e57d16750e549bfdf
kernel-spacemit-k1/drivers/net
History
wanlong 92524acb4d wireless: rtl8852bs: fix out of bounds access in atomic_inc() 
BUG: KASAN: global-out-of-bounds in rtw_hal_update_sta_entry+0x49c/0x7a6 [8852bs]
Write of size 4 at addr ffffffff0465af00 by task disp_eng_share_/1174

CPU: 0 PID: 1174 Comm: disp_eng_share_ Tainted: G        W          6.6.63 #20250613114718
Hardware name: spacemit k1-x deb1 board (DT)
Call Trace:
[<ffffffff80009290>] dump_backtrace+0x1c/0x24
[<ffffffff81ab253e>] show_stack+0x2c/0x38
[<ffffffff81adea4c>] dump_stack_lvl+0x3c/0x54
[<ffffffff81ab64fc>] print_report+0x1a2/0x4b8
[<ffffffff8035448c>] kasan_report+0xac/0x134
[<ffffffff80355988>] kasan_check_range+0xc0/0x148
[<ffffffff80356310>] __kasan_check_write+0x14/0x1c
[<ffffffff03f5d9e8>] rtw_hal_update_sta_entry+0x49c/0x7a6 [8852bs]
[<ffffffff03e7d2cc>] phl_update_media_status+0x186/0x72c [8852bs]
[<ffffffff03e7d9e6>] rtw_phl_cmd_update_media_status+0x126/0x192 [8852bs]
[<ffffffff03e32404>] rtw_hw_connected+0xfe/0x7c2 [8852bs]
[<ffffffff03db57fe>] rtw_set_hw_after_join+0x148/0x276 [8852bs]
[<ffffffff03d9018a>] _connect_msg_hdlr+0x31e/0x1170 [8852bs]
[<ffffffff03ef3bf8>] cur_req_hdl+0x86/0x96 [8852bs]
[<ffffffff03ef49b4>] msg_dispatch+0x506/0x64e [8852bs]
[<ffffffff03efa75c>] dispr_thread_loop_hdl+0x2f8/0x496 [8852bs]
[<ffffffff03efa90a>] dispr_share_thread_loop_hdl+0x10/0x18 [8852bs]
[<ffffffff03eeec54>] share_thread_hdl+0xd2/0x2c2 [8852bs]
[<ffffffff80067cbe>] kthread+0x198/0x1c6
[<ffffffff81af007e>] ret_from_fork+0xe/0x18

Change-Id: Ia80447adcd58d39115f4d4c20da22658788f6e1e
Signed-off-by: wanlong <long.wan@spacemit.com>
2025-06-18 14:53:25 +08:00
..
appletalk
…
arcnet
…
bonding
bonding: add ns target multicast address to slave device
2024-11-22 15:38:33 +01:00
caif
…
can
k1x: flexcan: speed up AP handle rcan irq
2025-05-23 10:15:59 +08:00
dsa
net: dsa: mv88e6xxx: support 4000ps cycle counter period
2024-11-01 01:58:31 +01:00
ethercat
ethercat: restore required EXPORT_SYMBOLs in module.c
2025-05-28 09:24:32 +08:00
ethernet
net:spacemit: Add support for wol on k1
2025-06-07 10:14:52 +08:00
fddi
…
fjes
…
hamradio
…
hippi
…
hyperv
hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
2024-11-01 01:58:33 +01:00
ieee802154
net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
2024-10-10 11:57:15 +02:00
ipa
…
ipvlan
ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
2024-06-12 11:12:59 +02:00
mctp
mctp i2c: handle NULL header address
2024-11-08 16:28:26 +01:00
mdio
net: phy: mdio-bcm-unimac: Add BCM6846 support
2024-11-17 15:08:57 +01:00
netdevsim
netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
2024-11-08 16:28:18 +01:00
pcs
net: pcs: xpcs: fix the wrong register that was written back
2024-10-10 11:57:58 +02:00
phy
net: phy: realtek: Add support for WOL magic packet on RTL8211F
2025-06-07 10:14:28 +08:00
plip
net: plip: fix break; causing plip to never transmit
2024-11-01 01:58:29 +01:00
ppp
ppp: fix ppp_async_encode() illegal access
2024-10-17 15:24:30 +02:00
pse-pd
…
slip
slip: make slhc_remember() more robust against malicious packets
2024-10-17 15:24:30 +02:00
team
…
thunderbolt
…
usb
qmi_wwan_f: add fibocom qmi modem driver
2024-11-28 18:29:02 +08:00
vmxnet3
vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
2024-11-01 01:58:24 +01:00
vxlan
vxlan: Handle error of rtnl_register_module().
2024-10-17 15:24:29 +02:00
wan
…
wireguard
wireguard: send: annotate intentional data race in checking empty queue
2024-07-18 13:21:23 +02:00
wireless
wireless: rtl8852bs: fix out of bounds access in atomic_inc()
2025-06-18 14:53:25 +08:00
wwan
net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
2024-11-14 13:19:37 +01:00
xen-netback
net/xen-netback: prevent UAF in xenvif_flush_hash()
2024-10-10 11:57:22 +02:00
amt.c
…
bareudp.c
bareudp: Pull inner IP header on xmit.
2024-10-04 16:28:58 +02:00
dummy.c
…
eql.c
…
geneve.c
geneve: Fix incorrect inner network header offset when innerprotoinherit is set
2024-06-21 14:38:33 +02:00
gtp.c
gtp: allow -1 to be specified as file description from userspace
2024-11-08 16:28:18 +01:00
ifb.c
…
Kconfig
add ethercat module support
2024-12-07 16:05:53 +08:00
LICENSE.SRC
…
loopback.c
…
macsec.c
macsec: Fix use-after-free while sending the offloading packet
2024-11-08 16:28:18 +01:00
macvlan.c
…
macvtap.c
…
Makefile
add ethercat module support
2024-12-07 16:05:53 +08:00
mdio.c
…
mhi_net.c
…
mii.c
…
net_failover.c
…
netconsole.c
net: netconsole: Disable target before netpoll cleanup
2024-08-03 08:54:13 +02:00
nlmon.c
…
ntb_netdev.c
net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()
2024-07-11 12:49:13 +02:00
rionet.c
…
sb1000.c
…
Space.c
…
sungem_phy.c
…
tap.c
tap: add missing verification for short frame
2024-07-27 11:34:11 +02:00
tun.c
tun: add missing verification for short frame
2024-07-27 11:34:10 +02:00
veth.c
…
virtio_net.c
virtio_net: Add hash_key_length check
2024-11-14 13:19:32 +01:00
vrf.c
vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
2024-10-10 11:57:56 +02:00
vsockmon.c
…
xen-netfront.c
…