Skip to main content

Browse the archive

https://github.com/torvalds/linux
05 April 2024, 19:05:47 UTC
Revision 67a2e213e7e937c41c52ab5bc46bf3f4de469f6e authored by Rohit Vaswani on 22 October 2015, 20:32:11 UTC, committed by Linus Torvalds on 23 October 2015, 08:55:10 UTC 
mm: cma: fix incorrect type conversion for size during dma allocation
 
This was found during userspace fuzzing test when a large size dma cma
allocation is made by driver(like ion) through userspace.

  show_stack+0x10/0x1c
  dump_stack+0x74/0xc8
  kasan_report_error+0x2b0/0x408
  kasan_report+0x34/0x40
  __asan_storeN+0x15c/0x168
  memset+0x20/0x44
  __dma_alloc_coherent+0x114/0x18c

Signed-off-by: Rohit Vaswani <rvaswani@codeaurora.org>
Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: Marek Szyprowski <m.szyprowski@samsung.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
1 parent 5211613
History
Tip revision: 67a2e213e7e937c41c52ab5bc46bf3f4de469f6e authored by Rohit Vaswani on 22 October 2015, 20:32:11 UTC
mm: cma: fix incorrect type conversion for size during dma allocation
Tip revision: 67a2e21
File Mode Size
bnep
cmtp
hidp
rfcomm
6lowpan.c -rw-r--r-- 31.3 KB
Kconfig -rw-r--r-- 3.1 KB
Makefile -rw-r--r-- 679 bytes
a2mp.c -rw-r--r-- 21.9 KB
a2mp.h -rw-r--r-- 3.6 KB
af_bluetooth.c -rw-r--r-- 16.7 KB
amp.c -rw-r--r-- 14.3 KB
amp.h -rw-r--r-- 2.3 KB
ecc.c -rw-r--r-- 19.8 KB
ecc.h -rw-r--r-- 2.3 KB
hci_conn.c -rw-r--r-- 40.6 KB
hci_core.c -rw-r--r-- 102.5 KB
hci_debugfs.c -rw-r--r-- 28.0 KB
hci_debugfs.h -rw-r--r-- 1.6 KB
hci_event.c -rw-r--r-- 128.3 KB
hci_request.c -rw-r--r-- 15.6 KB
hci_request.h -rw-r--r-- 2.3 KB
hci_sock.c -rw-r--r-- 30.1 KB
hci_sysfs.c -rw-r--r-- 4.3 KB
l2cap_core.c -rw-r--r-- 177.6 KB
l2cap_sock.c -rw-r--r-- 35.8 KB
lib.c -rw-r--r-- 2.9 KB
mgmt.c -rw-r--r-- 211.7 KB
mgmt_util.c -rw-r--r-- 4.8 KB
mgmt_util.h -rw-r--r-- 2.2 KB
sco.c -rw-r--r-- 24.3 KB
selftest.c -rw-r--r-- 7.9 KB
selftest.h -rw-r--r-- 1.6 KB
smp.c -rw-r--r-- 91.2 KB
smp.h -rw-r--r-- 4.9 KB
back to top