mirror of
https://github.com/torvalds/linux.git
synced 2024-11-30 16:11:38 +00:00
01625cc5e6
In the transition from using rproc_da_to_va(), the type of the load offset became unsigned. This causes the subsequent check to let negative values less than p_memsz + mem_size through and we write outside of the buffer. Change the type back to a signed value to catch this. Fixes: |
||
---|---|---|
.. | ||
bcm | ||
dove | ||
fsl | ||
mediatek | ||
qcom | ||
renesas | ||
rockchip | ||
samsung | ||
sunxi | ||
tegra | ||
ti | ||
ux500 | ||
versatile | ||
Kconfig | ||
Makefile |