5.4-stable patches

added patches:
	thunderbolt-use-the-actual-buffer-in-tb_async_error.patch

diff --git a/queue-5.4/series b/queue-5.4/series
index 4250b3c21839a70cbca3605c8e8d17088f9567b7..399f9eaaf824f76ccb3611f7ca92fea47d59e2a8 100644 (file)
--- a/queue-5.4/series
+++ b/queue-5.4/series
@@ -32,3 +32,4 @@ input-rk805-pwrkey-fix-module-autoloading.patch
 clk-bcm-rpi-fix-error-handling-of-raspberrypi_fw_get.patch
 hwmon-gpio-fan-fix-array-out-of-bounds-access.patch
 gpio-pca953x-add-mutex_lock-for-regcache-sync-in-pm.patch
+thunderbolt-use-the-actual-buffer-in-tb_async_error.patch

diff --git a/queue-5.4/thunderbolt-use-the-actual-buffer-in-tb_async_error.patch b/queue-5.4/thunderbolt-use-the-actual-buffer-in-tb_async_error.patch
new file mode 100644 (file)
index 0000000..14b4cb9
--- /dev/null
+++ b/queue-5.4/thunderbolt-use-the-actual-buffer-in-tb_async_error.patch
@@ -0,0 +1,31 @@
+From eb100b8fa8e8b59eb3e5fc7a5fd4a1e3c5950f64 Mon Sep 17 00:00:00 2001
+From: Mika Westerberg <mika.westerberg@linux.intel.com>
+Date: Fri, 29 Apr 2022 17:10:17 +0300
+Subject: thunderbolt: Use the actual buffer in tb_async_error()
+
+From: Mika Westerberg <mika.westerberg@linux.intel.com>
+
+commit eb100b8fa8e8b59eb3e5fc7a5fd4a1e3c5950f64 upstream.
+
+The received notification packet is held in pkg->buffer and not in pkg
+itself. Fix this by using the correct buffer.
+
+Fixes: 81a54b5e1986 ("thunderbolt: Let the connection manager handle all notifications")
+Cc: stable@vger.kernel.org
+Signed-off-by: Mika Westerberg <mika.westerberg@linux.intel.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+---
+ drivers/thunderbolt/ctl.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/drivers/thunderbolt/ctl.c
++++ b/drivers/thunderbolt/ctl.c
+@@ -388,7 +388,7 @@ static void tb_ctl_rx_submit(struct ctl_
+ 
+ static int tb_async_error(const struct ctl_pkg *pkg)
+ {
+-      const struct cfg_error_pkg *error = (const struct cfg_error_pkg *)pkg;
++      const struct cfg_error_pkg *error = pkg->buffer;
+ 
+       if (pkg->frame.eof != TB_CFG_PKG_ERROR)
+               return false;