linux/drivers/remoteproc
Bjorn Andersson 01625cc5e6 remoteproc: qcom: mdt_loader: Use signed type for offset
In the transition from using rproc_da_to_va(), the type of the load
offset became unsigned. This causes the subsequent check to let negative
values less than p_memsz + mem_size through and we write outside of the
buffer.

Change the type back to a signed value to catch this.

Fixes: 7f0dd07a9b ("remoteproc: qcom: mdt_loader: Refactor MDT loader")
Fixes: e7fd252262 ("remoteproc: qcom: q6v5: Decouple driver from MDT loader")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Reported-by: Stanimir Varbanov <stanimir.varbanov@linaro.org>
Acked-by: Andy Gross <andy.gross@linaro.org>
Signed-off-by: Bjorn Andersson <bjorn.andersson@linaro.org>
2017-02-22 02:07:13 -08:00
..
Kconfig remoteproc: st: add virtio communication support 2017-02-06 13:10:12 -08:00
Makefile remoteproc: Move qcom_mdt_loader into drivers/soc/qcom 2017-02-06 08:57:25 -08:00
da8xx_remoteproc.c drivers: remoteproc: constify rproc_ops structures 2017-01-18 10:46:50 -08:00
omap_remoteproc.c drivers: remoteproc: constify rproc_ops structures 2017-01-18 10:46:50 -08:00
omap_remoteproc.h remoteproc/omap: add a remoteproc driver for OMAP4 2012-02-08 22:53:47 +02:00
qcom_adsp_pil.c remoteproc: Drop qcom_scm_pas_supported() from adsp_probe() 2017-02-06 12:45:21 -08:00
qcom_common.c remoteproc: qcom: wcnss: Make SMD handling common 2017-02-06 08:57:25 -08:00
qcom_common.h remoteproc: qcom: wcnss: Make SMD handling common 2017-02-06 08:57:25 -08:00
qcom_q6v5_pil.c remoteproc: qcom: mdt_loader: Use signed type for offset 2017-02-22 02:07:13 -08:00
qcom_wcnss.c remoteproc: qcom: wcnss: Make SMD handling common 2017-02-06 08:57:25 -08:00
qcom_wcnss.h remoteproc: qcom_wcnss: Fix circular module dependency 2016-11-14 21:52:19 -08:00
qcom_wcnss_iris.c remoteproc: qcom_wcnss: Fix circular module dependency 2016-11-14 21:52:19 -08:00
remoteproc_core.c remoteproc: Modify the function names 2017-02-06 13:06:13 -08:00
remoteproc_debugfs.c remoteproc: debugfs: Remove state entry which is duplicated is sysfs 2016-10-31 17:24:48 -07:00
remoteproc_elf_loader.c remoteproc: align code with open parenthesis 2016-08-12 21:27:49 -07:00
remoteproc_internal.h remoteproc: Assign kref to rproc_vdev 2016-11-14 21:52:15 -08:00
remoteproc_sysfs.c remoteproc: Add RPROC_DELETED state 2017-01-30 14:18:52 -08:00
remoteproc_virtio.c remoteproc: virtio: Anchor vring life cycle in vdev 2016-11-14 21:52:16 -08:00
st_remoteproc.c remoteproc: st: add virtio communication support 2017-02-06 13:10:12 -08:00
st_slim_rproc.c drivers: remoteproc: constify rproc_ops structures 2017-01-18 10:46:50 -08:00
wkup_m3_rproc.c drivers: remoteproc: constify rproc_ops structures 2017-01-18 10:46:50 -08:00