Bjorn Andersson 01625cc5e6 remoteproc: qcom: mdt_loader: Use signed type for offset ... In the transition from using rproc_da_to_va(), the type of the load offset became unsigned. This causes the subsequent check to let negative values less than p_memsz + mem_size through and we write outside of the buffer. Change the type back to a signed value to catch this. Fixes: 7f0dd07a9b ("remoteproc: qcom: mdt_loader: Refactor MDT loader") Fixes: e7fd252262 ("remoteproc: qcom: q6v5: Decouple driver from MDT loader") Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Reported-by: Stanimir Varbanov <stanimir.varbanov@linaro.org> Acked-by: Andy Gross <andy.gross@linaro.org> Signed-off-by: Bjorn Andersson <bjorn.andersson@linaro.org>		2017-02-22 02:07:13 -08:00
..
Kconfig	remoteproc: Move qcom_mdt_loader into drivers/soc/qcom	2017-02-06 08:57:25 -08:00
Makefile	remoteproc: Move qcom_mdt_loader into drivers/soc/qcom	2017-02-06 08:57:25 -08:00
mdt_loader.c	remoteproc: qcom: mdt_loader: Use signed type for offset	2017-02-22 02:07:13 -08:00
qcom_gsbi.c	soc: qcom: gsbi: Add support for ADM CRCI muxing	2015-03-11 15:18:39 -05:00
smd-rpm.c	soc: qcom: smd: Make callback pass channel reference	2016-04-19 21:55:12 -05:00
smd.c	soc: qcom: smd: Reset rx tail rather than tx	2016-09-01 14:19:50 -05:00
smem_state.c	soc: qcom: Update properties for smem state referencing	2016-06-24 22:53:41 -05:00
smem.c	soc: qcom: smem: Silence probe defer error	2016-08-23 15:46:32 -05:00
smp2p.c	soc: qcom: smp2p: Drop io-accessors	2016-06-24 13:34:00 -05:00
smsm.c	soc: qcom: Update properties for smem state referencing	2016-06-24 22:53:41 -05:00
spm.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-05-17 16:26:30 -07:00
wcnss_ctrl.c	soc: qcom: wcnss_ctrl: Make wcnss_ctrl parent the other components	2016-06-24 13:34:00 -05:00