Bjorn Andersson 01625cc5e6 remoteproc: qcom: mdt_loader: Use signed type for offset ... In the transition from using rproc_da_to_va(), the type of the load offset became unsigned. This causes the subsequent check to let negative values less than p_memsz + mem_size through and we write outside of the buffer. Change the type back to a signed value to catch this. Fixes: 7f0dd07a9b ("remoteproc: qcom: mdt_loader: Refactor MDT loader") Fixes: e7fd252262 ("remoteproc: qcom: q6v5: Decouple driver from MDT loader") Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Reported-by: Stanimir Varbanov <stanimir.varbanov@linaro.org> Acked-by: Andy Gross <andy.gross@linaro.org> Signed-off-by: Bjorn Andersson <bjorn.andersson@linaro.org>		2017-02-22 02:07:13 -08:00
..
Kconfig	remoteproc: Move qcom_mdt_loader into drivers/soc/qcom	2017-02-06 08:57:25 -08:00
Makefile	remoteproc: Move qcom_mdt_loader into drivers/soc/qcom	2017-02-06 08:57:25 -08:00
mdt_loader.c	remoteproc: qcom: mdt_loader: Use signed type for offset	2017-02-22 02:07:13 -08:00
qcom_gsbi.c
smd-rpm.c
smd.c	soc: qcom: smd: Reset rx tail rather than tx	2016-09-01 14:19:50 -05:00
smem_state.c	soc: qcom: Update properties for smem state referencing	2016-06-24 22:53:41 -05:00
smem.c	soc: qcom: smem: Silence probe defer error	2016-08-23 15:46:32 -05:00
smp2p.c
smsm.c	soc: qcom: Update properties for smem state referencing	2016-06-24 22:53:41 -05:00
spm.c
wcnss_ctrl.c