Nuno Sá 0fa2b43b0a iio: buffer: Fix demux update ... commit 19ef7b70ca upstream. When updating the buffer demux, we will skip a scan element from the device in the case `in_ind != out_ind` and we enter the while loop. in_ind should only be refreshed with `find_next_bit()` in the end of the loop. Note, to cause problems we need a situation where we are skippig over an element (channel not enabled) that happens to not have the same size as the next element. Whilst this is a possible situation we haven't actually identified any cases in mainline where it happens as most drivers have consistent channel storage sizes with the exception of the timestamp which is the last element and hence never skipped over. Fixes: 5ada4ea9be ("staging:iio: add demux optionally to path from device to buffer") Signed-off-by: Nuno Sá <nuno.sa@analog.com> Link: https://lore.kernel.org/r/20201112144323.28887-1-nuno.sa@analog.com Cc: <Stable@vger.kernel.org> Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-12-30 11:51:44 +01:00
..
accessibility	…
acpi	ACPI: PNP: compare the string length in the matching_id()	2020-12-30 11:51:32 +01:00
amba	…
android	binder: add flag to clear buffer on txn complete	2020-12-30 11:51:35 +01:00
ata	ata: sata_nv: Fix retrieving of active qcs	2020-11-05 11:43:12 +01:00
atm	atm: nicstar: Unmap DMA on send error	2020-11-24 13:28:55 +01:00
auxdisplay	…
base	PM: runtime: Resume the device earlier in __device_release_driver()	2020-11-10 12:37:34 +01:00
bcma	…
block	nbd: fix a block_device refcount leak in nbd_release	2020-11-18 19:20:27 +01:00
bluetooth	Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware()	2020-12-30 11:51:20 +01:00
bus	bus: fsl-mc: fix error return code in fsl_mc_object_allocate()	2020-12-30 11:51:23 +01:00
cdrom	…
char	virtio: virtio_console: fix DMA memory allocation for rproc serial	2020-11-18 19:20:29 +01:00
clk	clk: sunxi-ng: Make sure divider tables have sentinel	2020-12-30 11:51:29 +01:00
clocksource	clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI	2020-12-30 11:51:19 +01:00
connector	…
counter	…
cpufreq	cpufreq: scpi: Add missing MODULE_ALIAS	2020-12-30 11:51:20 +01:00
cpuidle	cpuidle: Fixup IRQ state	2020-09-09 19:12:21 +02:00
crypto	crypto: atmel-i2c - select CONFIG_BITREVERSE	2020-12-30 11:51:24 +01:00
dax	dax: Fix alloc_dax_region() compile warning	2020-10-01 13:17:15 +02:00
dca	…
devfreq	PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out	2020-10-01 13:17:14 +02:00
dio	…
dma	dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()	2020-12-30 11:51:12 +01:00
dma-buf	dmabuf: fix NULL pointer dereference in dma_buf_release()	2020-10-01 13:18:24 +02:00
edac	EDAC/amd64: Fix PCI component registration	2020-12-30 11:51:36 +01:00
eisa	…
extcon	extcon: max77693: Fix modalias string	2020-12-30 11:51:24 +01:00
firewire	…
firmware	efi: EFI_EARLYCON should depend on EFI	2020-12-02 08:49:53 +01:00
fpga	fpga: dfl: fix bug in port reset handshake	2020-07-29 10:18:31 +02:00
fsi	…
gnss	gnss: sirf: fix error return code in sirf_probe()	2020-06-22 09:31:20 +02:00
gpio	gpio: eic-sprd: break loop when getting NULL device resource	2020-12-30 11:50:55 +01:00
gpu	drm/i915: Fix mismatch between misplaced vma check and vma insert	2020-12-30 11:51:41 +01:00
greybus	…
hid	HID: i2c-hid: add Vero K147 to descriptor override	2020-12-30 11:51:00 +01:00
hsi	HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()	2020-12-30 11:51:13 +01:00
hv	Drivers: hv: vmbus: Allow cleanup of VMBUS_CONNECT_CPU if disconnected	2020-11-24 13:29:23 +01:00
hwmon	hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable	2020-12-30 11:51:17 +01:00
hwspinlock	…
hwtracing	coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf()	2020-12-30 11:50:59 +01:00
i2c	Revert "i2c: i2c-qcom-geni: Fix DMA transfer race"	2020-12-30 11:51:01 +01:00
i3c	i3c: master: Fix error return in cdns_i3c_master_probe()	2020-10-29 09:57:51 +01:00
ide	…
idle	…
iio	iio: buffer: Fix demux update	2020-12-30 11:51:44 +01:00
infiniband	RDMA/cma: Don't overwrite sgid_attr after device is released	2020-12-30 11:51:26 +01:00
input	Input: cyapa_gen6 - fix out-of-bounds stack access	2020-12-30 11:51:32 +01:00
interconnect	interconnect: qcom: qcs404: Remove GPU and display RPM IDs	2020-12-16 10:56:56 +01:00
iommu	iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs	2020-12-11 13:23:31 +01:00
ipack	…
irqchip	irqchip/alpine-msi: Fix freeing of interrupts on allocation error path	2020-12-30 11:51:25 +01:00
isdn	…
leds	leds: bcm6328, bcm6358: use devres LED registering function	2020-11-05 11:43:24 +01:00
lightnvm	lightnvm: fix out-of-bounds write to array devices->info[]	2020-10-29 09:58:00 +01:00
macintosh	macintosh/via-macii: Access autopoll_devs when inside lock	2020-08-19 08:16:15 +02:00
mailbox	mailbox: avoid timer start from callback	2020-10-29 09:57:53 +01:00
mcb	…
md	dm ioctl: fix error return code in target_message	2020-12-30 11:51:18 +01:00
media	media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE	2020-12-30 11:51:31 +01:00
memory	memory: emif: Remove bogus debugfs error handling	2020-11-05 11:43:21 +01:00
memstick	memstick: r592: Fix error return in r592_probe()	2020-12-30 11:51:18 +01:00
message	scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()	2020-11-05 11:43:25 +01:00
mfd	mfd: sprd: Add wakeup capability for PMIC IRQ	2020-11-18 19:20:26 +01:00
misc	habanalabs: put devices before driver removal	2020-12-30 11:50:56 +01:00
mmc	mmc: pxamci: Fix error return code in pxamci_probe	2020-12-30 11:51:11 +01:00
mtd	mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments	2020-12-30 11:51:43 +01:00
mux	…
net	virtio_net: Fix error code in probe()	2020-12-30 11:51:29 +01:00
nfc	nfc: s3fwrn5: Release the nfc firmware	2020-12-30 11:51:26 +01:00
ntb	NTB: hw: amd: fix an issue about leak system resources	2020-10-29 09:58:00 +01:00
nubus	…
nvdimm	libnvdimm/label: Return -ENXIO for no slot in __blk_label_update	2020-12-30 11:51:27 +01:00
nvme	nvme: free sq/cq dbbuf pointers when dbbuf set fails	2020-12-02 08:49:48 +01:00
nvmem	nvmem: core: fix possibly memleak when use nvmem_cell_info_to_nvmem_cell()	2020-10-29 09:57:42 +01:00
of	of/address: Fix of_node memory leak in of_dma_is_coherent	2020-11-18 19:20:28 +01:00
opp	opp: Reduce the size of critical section in _opp_table_kref_release()	2020-11-18 19:20:21 +01:00
oprofile	…
parisc	parisc: mask out enable and reserved bits from sba imask	2020-08-19 08:16:26 +02:00
parport	…
pci	PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup()	2020-12-30 11:51:32 +01:00
pcmcia	…
perf	drivers/perf: thunderx2_pmu: Fix memory resource error handling	2020-10-29 09:57:30 +01:00
phy	phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure	2020-12-30 11:51:19 +01:00
pinctrl	pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe()	2020-12-30 11:51:18 +01:00
platform	platform/x86: mlx-platform: remove an unused variable	2020-12-30 11:51:40 +01:00
pnp	…
power	power: supply: bq24190_charger: fix reference leak	2020-12-30 11:51:14 +01:00
powercap	powercap: restrict energy meter to root access	2020-11-10 21:13:20 +01:00
pps	…
ps3	powerpc/ps3: use dma_mapping_error()	2020-12-30 11:51:26 +01:00
ptp	…
pwm	pwm: lp3943: Dynamically allocate PWM chip base	2020-12-30 11:51:28 +01:00
rapidio	rapidio: fix the missed put_device() for rio_mport_add_riodev	2020-10-29 09:57:53 +01:00
ras	…
regulator	regulator: workaround self-referent regulators	2020-11-24 13:29:22 +01:00
remoteproc	remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio()	2020-12-30 11:51:24 +01:00
reset	…
rpmsg	rpmsg: glink: Use complete_all for open states	2020-11-05 11:43:20 +01:00
rtc	rtc: pcf2127: fix pcf2127_nvmem_read/write() returns	2020-12-30 11:51:02 +01:00
s390	s390/dasd: fix list corruption of lcu list	2020-12-30 11:51:34 +01:00
sbus	…
scsi	scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free()	2020-12-30 11:51:44 +01:00
sfi	…
sh	…
siox	…
slimbus	slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI	2020-12-30 11:51:13 +01:00
soc	soc: qcom: smp2p: Safely acquire spinlock without IRQs	2020-12-30 11:51:43 +01:00
soundwire	soundwire: bus: disable pm_runtime in sdw_slave_delete	2020-10-01 13:17:36 +02:00
spi	spi: atmel-quadspi: Fix AHB memory accesses	2020-12-30 11:51:43 +01:00
spmi	…
ssb	…
staging	staging: comedi: mf6x4: Fix AI end-of-conversion detection	2020-12-30 11:51:35 +01:00
target	scsi: target: iscsi: Fix cmd abort fabric stop race	2020-12-02 08:49:49 +01:00
tc	…
tee	optee: add writeback to valid memory type	2020-12-02 08:49:53 +01:00
thermal	thermal: rcar_thermal: Handle probe error gracefully	2020-10-01 13:17:44 +02:00
thunderbolt	thunderbolt: Fix use-after-free in remove_unplugged_switch()	2020-12-11 13:23:29 +01:00
tty	serial_core: Check for port state when tty is in error state	2020-12-30 11:51:00 +01:00
uio	uio: Fix use-after-free in uio_unregister_device()	2020-11-18 19:20:29 +01:00
usb	USB: serial: keyspan_pda: fix write unthrottling	2020-12-30 11:51:37 +01:00
vfio	vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU	2020-12-30 11:51:30 +01:00
vhost	vhost scsi: fix cmd completion race	2020-12-02 08:49:48 +01:00
video	video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init()	2020-12-30 11:51:08 +01:00
virt	drivers/virt/fsl_hypervisor: Fix error handling path	2020-10-29 09:57:38 +01:00
virtio	virtio_ring: Fix two use after free bugs	2020-12-30 11:51:29 +01:00
visorbus	…
vlynq	…
vme	…
w1	w1: mxc_w1: Fix timeout resolution problem leading to bus error	2020-11-05 11:43:25 +01:00
watchdog	watchdog: coh901327: add COMMON_CLK dependency	2020-12-30 11:51:28 +01:00
xen	xen/events: block rogue events for some time	2020-11-05 11:43:12 +01:00
zorro	…
Kconfig	…
Makefile	…