Prasad J Pandit 146871c33e dma: omap: check dma channel data_type ...

When setting dma channel 'data_type', if (value & 3) == 3,
the set 'data_type' is said to be bad. This also leads to an
OOB access in 'omap_dma_transfer_generic', while doing
cpu_physical_memory_r/w operations. Add check to avoid it.

Reported-by: Jiang Xin <jiangxin1@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20170127120528.30959-1-ppandit@redhat.com
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>

2017-01-27 15:29:08 +00:00

..

bcm2835_dma.c

hw: explicitly include qemu/log.h

2016-05-19 16:42:29 +02:00

etraxfs_dma.c

etraxfs_dma: Dont forward zero-length payload to clients

2016-02-20 00:17:48 +01:00

i8257.c

i8257: Make device "i8257" unavailable with -device

2016-09-13 19:09:43 +02:00

i82374.c

i8257: pass ISA bus to DMA_init() function

2016-02-03 11:28:55 -05:00

Makefile.objs

dma: Add Xilinx Zynq devcfg device model

2016-07-04 13:15:22 +01:00

omap_dma.c

dma: omap: check dma channel data_type

2017-01-27 15:29:08 +00:00

pl080.c

hw/dma/pl080: Fix bad bit mask (PL080_CONF_M1 | PL080_CONF_M1)

2016-10-17 19:22:17 +01:00

pl330.c

hw: explicitly include qemu/log.h

2016-05-19 16:42:29 +02:00

puv3_dma.c

unicore: Clean up includes

2016-01-29 15:07:22 +00:00

pxa2xx_dma.c

hw/dma: QOM'ify pxa2xx_dma.c

2016-06-14 15:59:14 +01:00

rc4030.c

hw/dma: vmstateify rc4030

2016-09-29 12:07:51 +01:00

soc_dma.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

sparc32_dma.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

sun4m_iommu.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

trace-events

trace-events: fix first line comment in trace-events

2016-08-12 10:36:01 +01:00

xilinx_axidma.c

Reducing stack frame size in stream_process_mem2s()

2016-10-17 19:22:16 +01:00

xlnx_dpdma.c

introduce xlnx-dpdma

2016-06-14 16:01:03 +01:00

xlnx-zynq-devcfg.c

dma: Add Xilinx Zynq devcfg device model

2016-07-04 13:15:22 +01:00