From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Tue, 6 Sep 2022 10:04:22 +0000 (+0200)
Subject: 5.4-stable patches
X-Git-Tag: v5.10.142~35
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f384f3686dc1bf39fdc92ff46760666ce1702fa2;p=thirdparty%2Fkernel%2Fstable-queue.git

5.4-stable patches

added patches:
	thunderbolt-use-the-actual-buffer-in-tb_async_error.patch
---

diff --git a/queue-5.4/series b/queue-5.4/series
index 4250b3c2183..399f9eaaf82 100644
--- a/queue-5.4/series
+++ b/queue-5.4/series
@@ -32,3 +32,4 @@ input-rk805-pwrkey-fix-module-autoloading.patch
 clk-bcm-rpi-fix-error-handling-of-raspberrypi_fw_get.patch
 hwmon-gpio-fan-fix-array-out-of-bounds-access.patch
 gpio-pca953x-add-mutex_lock-for-regcache-sync-in-pm.patch
+thunderbolt-use-the-actual-buffer-in-tb_async_error.patch
diff --git a/queue-5.4/thunderbolt-use-the-actual-buffer-in-tb_async_error.patch b/queue-5.4/thunderbolt-use-the-actual-buffer-in-tb_async_error.patch
new file mode 100644
index 00000000000..14b4cb9a284
--- /dev/null
+++ b/queue-5.4/thunderbolt-use-the-actual-buffer-in-tb_async_error.patch
@@ -0,0 +1,31 @@
+From eb100b8fa8e8b59eb3e5fc7a5fd4a1e3c5950f64 Mon Sep 17 00:00:00 2001
+From: Mika Westerberg <mika.westerberg@linux.intel.com>
+Date: Fri, 29 Apr 2022 17:10:17 +0300
+Subject: thunderbolt: Use the actual buffer in tb_async_error()
+
+From: Mika Westerberg <mika.westerberg@linux.intel.com>
+
+commit eb100b8fa8e8b59eb3e5fc7a5fd4a1e3c5950f64 upstream.
+
+The received notification packet is held in pkg->buffer and not in pkg
+itself. Fix this by using the correct buffer.
+
+Fixes: 81a54b5e1986 ("thunderbolt: Let the connection manager handle all notifications")
+Cc: stable@vger.kernel.org
+Signed-off-by: Mika Westerberg <mika.westerberg@linux.intel.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+---
+ drivers/thunderbolt/ctl.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/drivers/thunderbolt/ctl.c
++++ b/drivers/thunderbolt/ctl.c
+@@ -388,7 +388,7 @@ static void tb_ctl_rx_submit(struct ctl_
+ 
+ static int tb_async_error(const struct ctl_pkg *pkg)
+ {
+-	const struct cfg_error_pkg *error = (const struct cfg_error_pkg *)pkg;
++	const struct cfg_error_pkg *error = pkg->buffer;
+ 
+ 	if (pkg->frame.eof != TB_CFG_PKG_ERROR)
+ 		return false;