From: Bjorn Helgaas <helgaas@kernel.org>
To: Lukas Wunner <lukas@wunner.de>
Cc: x86@kernel.org, linux-kernel@vger.kernel.org,
Chris Milsted <cmilsted@redhat.com>,
Matthew Garrett <mjg59@srcf.ucam.org>,
Andi Kleen <ak@linux.intel.com>, Michael Buesch <m@bues.ch>,
Bjorn Helgaas <bhelgaas@google.com>,
Matt Fleming <matt@codeblueprint.co.uk>,
Konstantin Simanov <k.simanov@stlk.ru>,
Bryan Paradis <bryan.paradis@gmail.com>,
Andrew Worsley <amworsley@gmail.com>,
Chris Bainbridge <chris.bainbridge@gmail.com>,
Linus Torvalds <torvalds@linux-foundation.org>,
linux-pci@vger.kernel.org, linux-wireless@vger.kernel.org,
b43-dev@lists.infradead.org, zajec5@gmail.com
Subject: [PATCH] x86: Add early quirk to reset Apple AirPort card
Date: Thu, 9 Jun 2016 17:57:58 -0500 [thread overview]
Message-ID: <20160609225758.GC19309@localhost> (raw)
In-Reply-To: <82c2548dffc6cfbc484b9111b1073f407c946061.1464477483.git.lukas@wunner.de>
On Sun, May 29, 2016 at 01:35:28AM +0200, Lukas Wunner wrote:
> The EFI firmware on Macs contains a full-fledged network stack for
> downloading OS X images from osrecovery.apple.com. Unfortunately
> on Macs introduced 2011 and 2012, EFI brings up the Broadcom 4331
> wireless card on every boot and leaves it enabled even after
> ExitBootServices has been called. The card continues to assert its IRQ
> line, causing spurious interrupts if the IRQ is shared. It also corrupts
> memory by DMAing received packets, allowing for remote code execution
> over the air. This only stops when a driver is loaded for the wireless
> card, which may be never if the driver is not installed or blacklisted.
> ...
> Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=79301
> Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=111781
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=728916
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=895951#c16
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1009819
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1098621
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1149632#c5
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1279130
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1332732
I think I saw mail about this being applied via the x86 tree. Let me
know if I need to do anything more here.
WARNING: multiple messages have this Message-ID (diff)
From: Bjorn Helgaas <helgaas@kernel.org>
To: Lukas Wunner <lukas@wunner.de>
Cc: x86@kernel.org, linux-kernel@vger.kernel.org,
Chris Milsted <cmilsted@redhat.com>,
Matthew Garrett <mjg59@srcf.ucam.org>,
Andi Kleen <ak@linux.intel.com>, Michael Buesch <m@bues.ch>,
Bjorn Helgaas <bhelgaas@google.com>,
Matt Fleming <matt@codeblueprint.co.uk>,
Konstantin Simanov <k.simanov@stlk.ru>,
Bryan Paradis <bryan.paradis@gmail.com>,
Andrew Worsley <amworsley@gmail.com>,
Chris Bainbridge <chris.bainbridge@gmail.com>,
Linus Torvalds <torvalds@linux-foundation.org>,
linux-pci@vger.kernel.org, linux-wireless@vger.kernel.org,
b43-dev@lists.infradead.org, zajec5@gmail.com
Subject: Re: [PATCH] x86: Add early quirk to reset Apple AirPort card
Date: Thu, 9 Jun 2016 17:57:58 -0500 [thread overview]
Message-ID: <20160609225758.GC19309@localhost> (raw)
In-Reply-To: <82c2548dffc6cfbc484b9111b1073f407c946061.1464477483.git.lukas@wunner.de>
On Sun, May 29, 2016 at 01:35:28AM +0200, Lukas Wunner wrote:
> The EFI firmware on Macs contains a full-fledged network stack for
> downloading OS X images from osrecovery.apple.com. Unfortunately
> on Macs introduced 2011 and 2012, EFI brings up the Broadcom 4331
> wireless card on every boot and leaves it enabled even after
> ExitBootServices has been called. The card continues to assert its IRQ
> line, causing spurious interrupts if the IRQ is shared. It also corrupts
> memory by DMAing received packets, allowing for remote code execution
> over the air. This only stops when a driver is loaded for the wireless
> card, which may be never if the driver is not installed or blacklisted.
> ...
> Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=79301
> Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=111781
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=728916
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=895951#c16
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1009819
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1098621
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1149632#c5
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1279130
> Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1332732
I think I saw mail about this being applied via the x86 tree. Let me
know if I need to do anything more here.
next prev parent reply other threads:[~2016-06-09 22:57 UTC|newest]
Thread overview: 20+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-05-28 23:35 [PATCH] x86: Add early quirk to reset Apple AirPort card Lukas Wunner
2016-05-28 23:35 ` Lukas Wunner
2016-06-02 9:48 ` Matt Fleming
2016-06-02 9:48 ` Matt Fleming
2016-06-08 14:23 ` [tip:x86/urgent] x86/quirks: " tip-bot for Lukas Wunner
2016-06-08 18:56 ` Yinghai Lu
2016-06-08 20:09 ` Lukas Wunner
2016-06-09 6:48 ` Ingo Molnar
2016-06-09 11:04 ` Lukas Wunner
2016-06-09 16:37 ` Yinghai Lu
2016-06-09 20:20 ` Lukas Wunner
2016-06-10 0:04 ` Yinghai Lu
2016-06-10 11:58 ` Ingo Molnar
2016-06-10 12:16 ` Lukas Wunner
2016-06-10 12:59 ` Ingo Molnar
2016-06-10 13:59 ` Lukas Wunner
2016-06-10 20:08 ` Bjorn Helgaas
2016-06-12 11:13 ` Lukas Wunner
2016-06-09 22:57 ` Bjorn Helgaas [this message]
2016-06-09 22:57 ` [PATCH] x86: " Bjorn Helgaas
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20160609225758.GC19309@localhost \
--to=helgaas@kernel.org \
--cc=ak@linux.intel.com \
--cc=amworsley@gmail.com \
--cc=b43-dev@lists.infradead.org \
--cc=bhelgaas@google.com \
--cc=bryan.paradis@gmail.com \
--cc=chris.bainbridge@gmail.com \
--cc=cmilsted@redhat.com \
--cc=k.simanov@stlk.ru \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-pci@vger.kernel.org \
--cc=linux-wireless@vger.kernel.org \
--cc=lukas@wunner.de \
--cc=m@bues.ch \
--cc=matt@codeblueprint.co.uk \
--cc=mjg59@srcf.ucam.org \
--cc=torvalds@linux-foundation.org \
--cc=x86@kernel.org \
--cc=zajec5@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.