Ioan Nicu c5157b7686 rapidio: fix rio_dma_transfer error handling ... Some of the mport_dma_req structure members were initialized late inside the do_dma_request() function, just before submitting the request to the dma engine. But we have some error branches before that. In case of such an error, the code would return on the error path and trigger the calling of dma_req_free() with a req structure which is not completely initialized. This causes a NULL pointer dereference in dma_req_free(). This patch fixes these error branches by making sure that all necessary mport_dma_req structure members are initialized in rio_dma_transfer() immediately after the request structure gets allocated. Link: http://lkml.kernel.org/r/20180412150605.GA31409@nokia.com Fixes: bbd876adb8 ("rapidio: use a reference count for struct mport_dma_req") Signed-off-by: Ioan Nicu <ioan.nicu.ext@nokia.com> Tested-by: Alexander Sverdlin <alexander.sverdlin@nokia.com> Acked-by: Alexandre Bounine <alex.bou9@gmail.com> Cc: Barry Wood <barry.wood@idt.com> Cc: Matt Porter <mporter@kernel.crashing.org> Cc: Christophe JAILLET <christophe.jaillet@wanadoo.fr> Cc: Logan Gunthorpe <logang@deltatee.com> Cc: Chris Wilson <chris@chris-wilson.co.uk> Cc: Tvrtko Ursulin <tvrtko.ursulin@intel.com> Cc: Frank Kunz <frank.kunz@nokia.com> Cc: <stable@vger.kernel.org> [4.6+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2018-04-20 17:18:35 -07:00
..
Kconfig
Makefile	rapidio: add mport char device driver	2016-03-22 15:36:02 -07:00
rio_mport_cdev.c	rapidio: fix rio_dma_transfer error handling	2018-04-20 17:18:35 -07:00
tsi721_dma.c	drivers/rapidio/devices/tsi721_dma.c: adjust six checks for null pointers	2018-02-06 18:32:46 -08:00
tsi721.c	rapidio/tsi721: use PCI_EXP_DEVCTL2_COMP_TIMEOUT macro	2018-02-15 18:41:06 -06:00
tsi721.h	drivers/rapidio/devices/tsi721.c: make module parameter variable name unique	2017-03-31 17:13:30 -07:00