Robin Gong
9e0951ca58
dmaengine: imx-sdma: fix size check for sdma script_number ...
[ Upstream commit bd73dfabdda280fc5f05bdec79b6721b4b2f035f ]
Illegal memory will be touch if SDMA_SCRIPT_ADDRS_ARRAY_SIZE_V3
(41) exceed the size of structure sdma_script_start_addrs(40),
thus cause memory corrupt such as slob block header so that kernel
trap into while() loop forever in slob_free(). Please refer to below
code piece in imx-sdma.c:
for (i = 0; i < sdma->script_number; i++)
if (addr_arr[i] > 0)
saddr_arr[i] = addr_arr[i]; /* memory corrupt here */
That issue was brought by commit a572460be9a572460be9stable@vger.kernel
Link: https://www.spinics.net/lists/arm-kernel/msg754895.html
Signed-off-by: Robin Gong <yibin.gong@nxp.com>
Reported-by: Jurgen Lambrecht <J.Lambrecht@TELEVIC.com>
Link: https://lore.kernel.org/r/1569347584-3478-1-git-send-email-yibin.gong@nxp.com
[vkoul: update the patch title]
Signed-off-by: Vinod Koul <vkoul@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-01-29 10:24:34 +01:00
[media] media: platform: pxa_camera: make a standalone v4l2 device
2016-09-09 10:52:31 -03:00
iio: add ad5761 DAC driver
2016-01-24 14:46:21 +00:00
Input: ad7879 - move header to platform_data directory
2016-03-08 10:51:10 -08:00
ASoC: adau17x1: Correct typos in file headers
2016-02-24 13:14:05 +09:00
ASoC: samsung: pass filter function as pointer
2015-11-21 13:27:22 +00:00
ARM: OMAP2+: McBSP: Remove the old iclk allow/deny idle code
2016-06-10 05:07:25 -07:00
eeprom: at24: add support for at24mac series
2016-07-17 19:58:00 +02:00
ARM: SoC platform updates for v4.4
2015-11-10 14:56:23 -08:00
net: dsa: b53: Add support for Broadcom RoboSwitch
2016-06-09 22:21:29 -07:00
brcmfmac: switch to new platform data
2016-03-07 14:15:50 +02:00
dmaengine: dw: override LLP support if asked in platform data
2016-08-31 16:13:29 +02:00
dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction
2019-11-25 09:53:24 +01:00
dmaengine: imx-sdma: fix size check for sdma script_number
2020-01-29 10:24:34 +01:00
dmaengine: mmp_tdma: enable COMPILE_TEST
2016-09-26 22:31:04 +05:30
dmaengine: s3c24xx: Add dma_slave_map for s3c2440 devices
2016-09-26 23:13:04 +05:30
dmaengine updates for 4.5-rc1
2016-01-13 10:59:52 -08:00
gpio: dwapb: convert device node to fwnode
2016-04-29 11:23:53 +02:00
mfd/gpio: Move HTC GPIO driver to GPIO subsystem
2016-09-28 09:28:34 -07:00
ARM: OMAP2+: gpmc: Add gpmc timings and settings to platform data
2016-04-15 11:51:02 +03:00
hwmon: (ina2xx) fix sysfs shunt resistor read access
2018-10-03 17:01:52 -07:00
iio:imu:mpu6050: enhance mounting matrix support
2016-04-23 22:16:01 +01:00
ARM: OMAP2+: Remove omap_mmu_dev_attr structure
2015-11-30 10:35:07 -08:00
regulator: isl9305: fix array size
2018-03-22 09:17:50 +01:00
mmc: sdhci-esdhc-imx: support setting tuning start point
2016-07-25 10:34:54 +02:00
dmaengine: mmp-pdma: add number of requestors
2016-02-26 22:56:52 +01:00
mtd: nand: omap2: Implement NAND ready using gpiolib
2016-04-15 11:55:37 +03:00
mtd: nand: s3c2410: kill the ->ecc_layout field
2016-01-26 10:27:35 -08:00
hwmon: (ntc_thermistor) Add support for ncpXXxh103
2016-03-05 06:25:34 -08:00
platform_data: omapdss: Remove unused members from omap_dss_board_info
2016-06-03 16:06:35 +03:00
ARM: OMAP2+: Add more functions to pwm pdata for ir-rx51
2016-04-28 14:26:32 -07:00
remoteproc/omap: fix various code formatting issues
2016-08-12 21:27:50 -07:00
rtc: ds2404: move rtc-ds2404.h to platform_data
2016-06-27 10:48:28 +02:00
rtc: m48t86: move m48t86.h to platform_data
2016-06-27 18:15:25 +02:00
rtc: v3020: move rtc-v3020.h to platform_data
2016-07-09 10:24:21 +02:00
serial: sa1100: make sa1100_register_uart_fns a function
2016-03-07 16:11:14 -08:00
MIPS: Add support for PIC32MZDA platform
2016-01-24 02:53:28 +01:00
ARM: OMAP: serial: Rename DRIVER_NAME
2016-02-06 23:13:30 -08:00
hwmon: add support for Sensirion SHT3x sensors
2016-06-27 18:58:03 -07:00
spi: s3c64xx: consider the case when the CS line is not connected
2016-06-29 22:45:23 +01:00
tpm/st33zp24: Extend Copyright headers
2016-06-25 17:21:42 +03:00
iio: st_sensors: support open drain mode
2016-04-19 19:58:13 +01:00
ARM: s3c64xx: use new adc/touchscreen driver
2015-12-01 21:50:25 +01:00
