mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-21 22:47:56 +00:00
c7634180fc
Refreshed all patches. Remove upstreamed: - 023-0013-crypto-crypto4xx-fix-AES-CTR-blocksize-value.patch - 023-0014-crypto-crypto4xx-fix-blocksize-for-cfb-and-ofb.patch - 023-0015-crypto-crypto4xx-block-ciphers-should-only-accept-co.patch - 950-0252-staging-bcm2835_camera-Ensure-all-buffers-are-return.patch - 950-0253-staging-bcm2835-camera-Remove-check-of-the-number-of.patch - 950-0254-staging-bcm2835-camera-Handle-empty-EOS-buffers-whil.patch - 950-0489-staging-mmal-vchiq-Replace-spinlock-protecting-conte.patch - 0021-ARM-dts-gemini-Fix-up-DNS-313-compatible-string.patch - 049-v4.20-mips-remove-superfluous-check-for-linux.patch - 100-MIPS-fix-build-on-non-linux-hosts.patch - 303-MIPS-Fix-bounds-check-virt_addr_valid.patch - 0002-usb-dwc2-use-a-longer-AHB-idle-timeout-in-dwc2_core_.patch Altered patches: - 950-0267-staging-vc04_services-Split-vchiq-mmal-into-a-module.patch - 700-net-add-qualcomm-mdio-and-phy.patch Fixes: - CVE-2019-3846 New symbol: - AX88796B_PHY Compile-tested on: cns3xxx, imx6 Runtime-tested on: cns3xxx, imx6 Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
56 lines
1.8 KiB
Diff
56 lines
1.8 KiB
Diff
From 41079f8602ae082b78e33e7d326ff5f57b7d76e8 Mon Sep 17 00:00:00 2001
|
|
From: Dave Stevenson <dave.stevenson@raspberrypi.org>
|
|
Date: Fri, 28 Jun 2019 11:30:49 +0100
|
|
Subject: [PATCH 696/703] Revert "media: vb2: Allow reqbufs(0) with "in use"
|
|
MMAP buffers"
|
|
|
|
This reverts commit a2c73e18c1f657de6d654f51effa0a94863abbd8.
|
|
An alternative version was accepted upstream. Revert this patch to
|
|
apply that one.
|
|
|
|
Signed-off-by: Dave Stevenson <dave.stevenson@raspberrypi.org>
|
|
---
|
|
.../media/common/videobuf2/videobuf2-core.c | 23 +++++++++++++++++++
|
|
1 file changed, 23 insertions(+)
|
|
|
|
--- a/drivers/media/common/videobuf2/videobuf2-core.c
|
|
+++ b/drivers/media/common/videobuf2/videobuf2-core.c
|
|
@@ -554,6 +554,20 @@ bool vb2_buffer_in_use(struct vb2_queue
|
|
}
|
|
EXPORT_SYMBOL(vb2_buffer_in_use);
|
|
|
|
+/*
|
|
+ * __buffers_in_use() - return true if any buffers on the queue are in use and
|
|
+ * the queue cannot be freed (by the means of REQBUFS(0)) call
|
|
+ */
|
|
+static bool __buffers_in_use(struct vb2_queue *q)
|
|
+{
|
|
+ unsigned int buffer;
|
|
+ for (buffer = 0; buffer < q->num_buffers; ++buffer) {
|
|
+ if (vb2_buffer_in_use(q, q->bufs[buffer]))
|
|
+ return true;
|
|
+ }
|
|
+ return false;
|
|
+}
|
|
+
|
|
void vb2_core_querybuf(struct vb2_queue *q, unsigned int index, void *pb)
|
|
{
|
|
call_void_bufop(q, fill_user_buffer, q->bufs[index], pb);
|
|
@@ -665,7 +679,16 @@ int vb2_core_reqbufs(struct vb2_queue *q
|
|
|
|
if (*count == 0 || q->num_buffers != 0 ||
|
|
(q->memory != VB2_MEMORY_UNKNOWN && q->memory != memory)) {
|
|
+ /*
|
|
+ * We already have buffers allocated, so first check if they
|
|
+ * are not in use and can be freed.
|
|
+ */
|
|
mutex_lock(&q->mmap_lock);
|
|
+ if (q->memory == VB2_MEMORY_MMAP && __buffers_in_use(q)) {
|
|
+ mutex_unlock(&q->mmap_lock);
|
|
+ dprintk(1, "memory in use, cannot free\n");
|
|
+ return -EBUSY;
|
|
+ }
|
|
|
|
/*
|
|
* Call queue_cancel to clean up any buffers in the PREPARED or
|