mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2024-12-15 11:26:44 +07:00
01625cc5e6
In the transition from using rproc_da_to_va(), the type of the load offset became unsigned. This causes the subsequent check to let negative values less than p_memsz + mem_size through and we write outside of the buffer. Change the type back to a signed value to catch this. Fixes: |
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
mdt_loader.c | ||
qcom_gsbi.c | ||
smd-rpm.c | ||
smd.c | ||
smem_state.c | ||
smem.c | ||
smp2p.c | ||
smsm.c | ||
spm.c | ||
wcnss_ctrl.c |