mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-08-05 16:54:27 +00:00
![]() In the transition from using rproc_da_to_va(), the type of the load offset became unsigned. This causes the subsequent check to let negative values less than p_memsz + mem_size through and we write outside of the buffer. Change the type back to a signed value to catch this. Fixes: |
||
---|---|---|
.. | ||
da8xx_remoteproc.c | ||
Kconfig | ||
Makefile | ||
omap_remoteproc.c | ||
omap_remoteproc.h | ||
qcom_adsp_pil.c | ||
qcom_common.c | ||
qcom_common.h | ||
qcom_q6v5_pil.c | ||
qcom_wcnss.c | ||
qcom_wcnss.h | ||
qcom_wcnss_iris.c | ||
remoteproc_core.c | ||
remoteproc_debugfs.c | ||
remoteproc_elf_loader.c | ||
remoteproc_internal.h | ||
remoteproc_sysfs.c | ||
remoteproc_virtio.c | ||
st_remoteproc.c | ||
st_slim_rproc.c | ||
wkup_m3_rproc.c |