146871c33e
When setting dma channel 'data_type', if (value & 3) == 3, the set 'data_type' is said to be bad. This also leads to an OOB access in 'omap_dma_transfer_generic', while doing cpu_physical_memory_r/w operations. Add check to avoid it. Reported-by: Jiang Xin <jiangxin1@huawei.com> Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org> Message-id: 20170127120528.30959-1-ppandit@redhat.com Reviewed-by: Peter Maydell <peter.maydell@linaro.org> Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
||
---|---|---|
.. | ||
bcm2835_dma.c | ||
etraxfs_dma.c | ||
i8257.c | ||
i82374.c | ||
Makefile.objs | ||
omap_dma.c | ||
pl080.c | ||
pl330.c | ||
puv3_dma.c | ||
pxa2xx_dma.c | ||
rc4030.c | ||
soc_dma.c | ||
sparc32_dma.c | ||
sun4m_iommu.c | ||
trace-events | ||
xilinx_axidma.c | ||
xlnx_dpdma.c | ||
xlnx-zynq-devcfg.c |