Prasad J Pandit 146871c33e dma: omap: check dma channel data_type ... When setting dma channel 'data_type', if (value & 3) == 3, the set 'data_type' is said to be bad. This also leads to an OOB access in 'omap_dma_transfer_generic', while doing cpu_physical_memory_r/w operations. Add check to avoid it. Reported-by: Jiang Xin <jiangxin1@huawei.com> Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org> Message-id: 20170127120528.30959-1-ppandit@redhat.com Reviewed-by: Peter Maydell <peter.maydell@linaro.org> Signed-off-by: Peter Maydell <peter.maydell@linaro.org>		2017-01-27 15:29:08 +00:00
..
bcm2835_dma.c	hw: explicitly include qemu/log.h	2016-05-19 16:42:29 +02:00
etraxfs_dma.c	etraxfs_dma: Dont forward zero-length payload to clients	2016-02-20 00:17:48 +01:00
i8257.c	i8257: Make device "i8257" unavailable with -device	2016-09-13 19:09:43 +02:00
i82374.c	i8257: pass ISA bus to DMA_init() function	2016-02-03 11:28:55 -05:00
Makefile.objs	dma: Add Xilinx Zynq devcfg device model	2016-07-04 13:15:22 +01:00
omap_dma.c	dma: omap: check dma channel data_type	2017-01-27 15:29:08 +00:00
pl080.c	hw/dma/pl080: Fix bad bit mask (PL080_CONF_M1 | PL080_CONF_M1)	2016-10-17 19:22:17 +01:00
pl330.c	hw: explicitly include qemu/log.h	2016-05-19 16:42:29 +02:00
puv3_dma.c	unicore: Clean up includes	2016-01-29 15:07:22 +00:00
pxa2xx_dma.c	hw/dma: QOM'ify pxa2xx_dma.c	2016-06-14 15:59:14 +01:00
rc4030.c	hw/dma: vmstateify rc4030	2016-09-29 12:07:51 +01:00
soc_dma.c	hw: Clean up includes	2016-01-29 15:07:25 +00:00
sparc32_dma.c	hw: Clean up includes	2016-01-29 15:07:25 +00:00
sun4m_iommu.c	hw: Clean up includes	2016-01-29 15:07:25 +00:00
trace-events	trace-events: fix first line comment in trace-events	2016-08-12 10:36:01 +01:00
xilinx_axidma.c	Reducing stack frame size in stream_process_mem2s()	2016-10-17 19:22:16 +01:00
xlnx_dpdma.c	introduce xlnx-dpdma	2016-06-14 16:01:03 +01:00
xlnx-zynq-devcfg.c	dma: Add Xilinx Zynq devcfg device model	2016-07-04 13:15:22 +01:00