OpenE2K
/
linux
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
linux/drivers/soc/qcom
History
Bjorn Andersson 01625cc5e6 remoteproc: qcom: mdt_loader: Use signed type for offset 
In the transition from using rproc_da_to_va(), the type of the load
offset became unsigned. This causes the subsequent check to let negative
values less than p_memsz + mem_size through and we write outside of the
buffer.

Change the type back to a signed value to catch this.

Fixes: 7f0dd07a9b ("remoteproc: qcom: mdt_loader: Refactor MDT loader")
Fixes: e7fd252262 ("remoteproc: qcom: q6v5: Decouple driver from MDT loader")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Reported-by: Stanimir Varbanov <stanimir.varbanov@linaro.org>
Acked-by: Andy Gross <andy.gross@linaro.org>
Signed-off-by: Bjorn Andersson <bjorn.andersson@linaro.org>
 		2017-02-22 02:07:13 -08:00
..
Kconfig remoteproc: Move qcom_mdt_loader into drivers/soc/qcom 2017-02-06 08:57:25 -08:00
Makefile remoteproc: Move qcom_mdt_loader into drivers/soc/qcom 2017-02-06 08:57:25 -08:00
mdt_loader.c remoteproc: qcom: mdt_loader: Use signed type for offset 2017-02-22 02:07:13 -08:00
qcom_gsbi.c
…
smd-rpm.c
…
smd.c soc: qcom: smd: Reset rx tail rather than tx 2016-09-01 14:19:50 -05:00
smem.c soc: qcom: smem: Silence probe defer error 2016-08-23 15:46:32 -05:00
smem_state.c soc: qcom: Update properties for smem state referencing 2016-06-24 22:53:41 -05:00
smp2p.c soc: qcom: smp2p: Drop io-accessors 2016-06-24 13:34:00 -05:00
smsm.c soc: qcom: Update properties for smem state referencing 2016-06-24 22:53:41 -05:00
spm.c
…
wcnss_ctrl.c
…