qemu/hw/dma
Prasad J Pandit 146871c33e dma: omap: check dma channel data_type
When setting dma channel 'data_type', if (value & 3) == 3,
the set 'data_type' is said to be bad. This also leads to an
OOB access in 'omap_dma_transfer_generic', while doing
cpu_physical_memory_r/w operations. Add check to avoid it.

Reported-by: Jiang Xin <jiangxin1@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20170127120528.30959-1-ppandit@redhat.com
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
2017-01-27 15:29:08 +00:00
..
bcm2835_dma.c hw: explicitly include qemu/log.h 2016-05-19 16:42:29 +02:00
etraxfs_dma.c
i8257.c i8257: Make device "i8257" unavailable with -device 2016-09-13 19:09:43 +02:00
i82374.c
Makefile.objs dma: Add Xilinx Zynq devcfg device model 2016-07-04 13:15:22 +01:00
omap_dma.c dma: omap: check dma channel data_type 2017-01-27 15:29:08 +00:00
pl080.c hw/dma/pl080: Fix bad bit mask (PL080_CONF_M1 | PL080_CONF_M1) 2016-10-17 19:22:17 +01:00
pl330.c hw: explicitly include qemu/log.h 2016-05-19 16:42:29 +02:00
puv3_dma.c
pxa2xx_dma.c hw/dma: QOM'ify pxa2xx_dma.c 2016-06-14 15:59:14 +01:00
rc4030.c hw/dma: vmstateify rc4030 2016-09-29 12:07:51 +01:00
soc_dma.c
sparc32_dma.c
sun4m_iommu.c
trace-events trace-events: fix first line comment in trace-events 2016-08-12 10:36:01 +01:00
xilinx_axidma.c Reducing stack frame size in stream_process_mem2s() 2016-10-17 19:22:16 +01:00
xlnx_dpdma.c introduce xlnx-dpdma 2016-06-14 16:01:03 +01:00
xlnx-zynq-devcfg.c dma: Add Xilinx Zynq devcfg device model 2016-07-04 13:15:22 +01:00