2
0
mirror of https://github.com/edk2-porting/linux-next.git synced 2024-12-23 20:53:53 +08:00
linux-next/drivers/soc/qcom
Bjorn Andersson 01625cc5e6 remoteproc: qcom: mdt_loader: Use signed type for offset
In the transition from using rproc_da_to_va(), the type of the load
offset became unsigned. This causes the subsequent check to let negative
values less than p_memsz + mem_size through and we write outside of the
buffer.

Change the type back to a signed value to catch this.

Fixes: 7f0dd07a9b ("remoteproc: qcom: mdt_loader: Refactor MDT loader")
Fixes: e7fd252262 ("remoteproc: qcom: q6v5: Decouple driver from MDT loader")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Reported-by: Stanimir Varbanov <stanimir.varbanov@linaro.org>
Acked-by: Andy Gross <andy.gross@linaro.org>
Signed-off-by: Bjorn Andersson <bjorn.andersson@linaro.org>
2017-02-22 02:07:13 -08:00
..
Kconfig remoteproc: Move qcom_mdt_loader into drivers/soc/qcom 2017-02-06 08:57:25 -08:00
Makefile remoteproc: Move qcom_mdt_loader into drivers/soc/qcom 2017-02-06 08:57:25 -08:00
mdt_loader.c remoteproc: qcom: mdt_loader: Use signed type for offset 2017-02-22 02:07:13 -08:00
qcom_gsbi.c soc: qcom: gsbi: Add support for ADM CRCI muxing 2015-03-11 15:18:39 -05:00
smd-rpm.c soc: qcom: smd: Make callback pass channel reference 2016-04-19 21:55:12 -05:00
smd.c soc: qcom: smd: Reset rx tail rather than tx 2016-09-01 14:19:50 -05:00
smem_state.c soc: qcom: Update properties for smem state referencing 2016-06-24 22:53:41 -05:00
smem.c soc: qcom: smem: Silence probe defer error 2016-08-23 15:46:32 -05:00
smp2p.c soc: qcom: smp2p: Drop io-accessors 2016-06-24 13:34:00 -05:00
smsm.c soc: qcom: Update properties for smem state referencing 2016-06-24 22:53:41 -05:00
spm.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next 2016-05-17 16:26:30 -07:00
wcnss_ctrl.c soc: qcom: wcnss_ctrl: Make wcnss_ctrl parent the other components 2016-06-24 13:34:00 -05:00