From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Tue, 10 Jan 2017 13:14:07 +0000 (+0100)
Subject: 4.4-stable patches
X-Git-Tag: v4.4.42~7
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f3f7feb9441220d1335c68ae1a8df59e517e95cb;p=thirdparty%2Fkernel%2Fstable-queue.git

4.4-stable patches

added patches:
	tick-broadcast-prevent-null-pointer-dereference.patch
---

diff --git a/queue-4.4/series b/queue-4.4/series
index c4de44f2b36..bf63146d773 100644
--- a/queue-4.4/series
+++ b/queue-4.4/series
@@ -98,3 +98,4 @@ net-ti-cpmac-fix-compiler-warning-due-to-type-confusion.patch
 net-vxge-avoid-unused-function-warnings.patch
 cx23885-dvb-move-initialization-of-a8293_pdata.patch
 drm-radeon-always-store-crtc-relative-radeon_crtc-cursor_x-y-values.patch
+tick-broadcast-prevent-null-pointer-dereference.patch
diff --git a/queue-4.4/tick-broadcast-prevent-null-pointer-dereference.patch b/queue-4.4/tick-broadcast-prevent-null-pointer-dereference.patch
new file mode 100644
index 00000000000..f68f77a356b
--- /dev/null
+++ b/queue-4.4/tick-broadcast-prevent-null-pointer-dereference.patch
@@ -0,0 +1,46 @@
+From c1a9eeb938b5433947e5ea22f89baff3182e7075 Mon Sep 17 00:00:00 2001
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Thu, 15 Dec 2016 12:10:37 +0100
+Subject: tick/broadcast: Prevent NULL pointer dereference
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+commit c1a9eeb938b5433947e5ea22f89baff3182e7075 upstream.
+
+When a disfunctional timer, e.g. dummy timer, is installed, the tick core
+tries to setup the broadcast timer.
+
+If no broadcast device is installed, the kernel crashes with a NULL pointer
+dereference in tick_broadcast_setup_oneshot() because the function has no
+sanity check.
+
+Reported-by: Mason <slash.tmp@free.fr>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Cc: Mark Rutland <mark.rutland@arm.com>
+Cc: Anna-Maria Gleixner <anna-maria@linutronix.de>
+Cc: Richard Cochran <rcochran@linutronix.de>
+Cc: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Cc: Daniel Lezcano <daniel.lezcano@linaro.org>
+Cc: Peter Zijlstra <peterz@infradead.org>,
+Cc: Sebastian Frias <sf84@laposte.net>
+Cc: Thibaud Cornic <thibaud_cornic@sigmadesigns.com>
+Cc: Robin Murphy <robin.murphy@arm.com>
+Link: http://lkml.kernel.org/r/1147ef90-7877-e4d2-bb2b-5c4fa8d3144b@free.fr
+Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+---
+ kernel/time/tick-broadcast.c |    3 +++
+ 1 file changed, 3 insertions(+)
+
+--- a/kernel/time/tick-broadcast.c
++++ b/kernel/time/tick-broadcast.c
+@@ -871,6 +871,9 @@ void tick_broadcast_setup_oneshot(struct
+ {
+ 	int cpu = smp_processor_id();
+ 
++	if (!bc)
++		return;
++
+ 	/* Set it up only once ! */
+ 	if (bc->event_handler != tick_handle_oneshot_broadcast) {
+ 		int was_periodic = clockevent_state_periodic(bc);