Yong Zhi c7cbef1fdb media: intel-ipu3: cio2: fix a crash with out-of-bounds access ... When dmabuf is used for BLOB type frame, the frame buffers allocated by gralloc will hold more pages than the valid frame data due to height alignment. In this case, the page numbers in sg list could exceed the FBPT upper limit value - max_lops(8)*1024 to cause crash. Limit the LOP access to the valid data length to avoid FBPT sub-entries overflow. Signed-off-by: Yong Zhi <yong.zhi@intel.com> Signed-off-by: Cao Bing Bu <bingbu.cao@intel.com> Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>		2018-01-05 12:43:20 -05:00
..
ipu3	media: intel-ipu3: cio2: fix a crash with out-of-bounds access	2018-01-05 12:43:20 -05:00
Makefile