Rohit Vaswani 67a2e213e7 mm: cma: fix incorrect type conversion for size during dma allocation ...

This was found during userspace fuzzing test when a large size dma cma
allocation is made by driver(like ion) through userspace.

  show_stack+0x10/0x1c
  dump_stack+0x74/0xc8
  kasan_report_error+0x2b0/0x408
  kasan_report+0x34/0x40
  __asan_storeN+0x15c/0x168
  memset+0x20/0x44
  __dma_alloc_coherent+0x114/0x18c

Signed-off-by: Rohit Vaswani <[email protected]>
Acked-by: Greg Kroah-Hartman <[email protected]>
Cc: Marek Szyprowski <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>

2015-10-23 17:55:10 +09:00

..

power

PM / Domains: Fix validation of latency constraints in genpd governor

2015-10-14 02:34:43 +02:00

regmap

regmap: debugfs: Don't bother actually printing when calculating max length

2015-09-19 07:38:12 -07:00

attribute_container.c

attribute_container: fix missing blank lines after declarations

2015-03-25 14:35:09 +01:00

base.h

driver core: correct device's shutdown order

2015-08-05 17:07:19 -07:00

bus.c

driver-core: add asynchronous probing support for drivers

2015-05-20 00:25:24 -07:00

cacheinfo.c

cpu/cacheinfo: Fix teardown path

2015-09-17 06:06:54 -07:00

class.c

drivers: base: class: Add a blank line after declarations

2015-03-25 14:36:19 +01:00

component.c

component: fix bug with legacy API

2014-07-04 18:05:05 +01:00

container.c

…

core.c

Merge tag 'pm+acpi-4.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

2015-09-01 19:45:46 -07:00

cpu.c

cpu: Remove bogus __ref annotation of cpu_subsys_online()

2015-08-05 15:18:26 -07:00

dd.c

Merge tag 'pm+acpi-4.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

2015-09-01 19:45:46 -07:00

devcoredump.c

devcoredump: provide a one-way disable function

2014-11-26 19:40:12 -08:00

devres.c

devres: fix devres_get()

2015-08-05 15:11:48 -07:00

devtmpfs.c

VFS: assorted weird filesystems: d_inode() annotations

2015-04-15 15:06:58 -04:00

dma-coherent.c

drivers: dma-coherent: add initialization from device tree

2014-10-14 02:18:12 +02:00

dma-contiguous.c

mm: cma: fix incorrect type conversion for size during dma allocation

2015-10-23 17:55:10 +09:00

dma-mapping.c

drivers: base: dma-mapping: Erase blank space after pointer

2015-03-25 14:36:19 +01:00

driver.c

driver core: add missing blank line after declaration

2015-03-25 14:36:30 +01:00

firmware_class.c

firmware: fix wrong memory deallocation in fw_add_devm_name()

2015-08-05 15:18:26 -07:00

firmware.c

…

hypervisor.c

…

init.c

drivers: of/base: move of_init to driver_init

2015-05-26 19:55:56 -07:00

isa.c

…

Kconfig

cma: make default CMA area size zero for x86

2014-12-10 17:41:06 -08:00

Makefile

drivers/base: Add MSI domain support for non-PCI devices

2015-07-30 00:14:38 +02:00

map.c

drivers: base: map: Use kmalloc_array instead of kmalloc

2015-03-25 14:35:08 +01:00

memory.c

mm, hotplug: fix concurrent memory hot-add deadlock

2015-04-14 16:49:00 -07:00

module.c

…

node.c

mm: check if section present during memory block registering

2015-09-04 16:54:41 -07:00

pinctrl.c

…

platform-msi.c

platform-msi: Do not cache msi_desc in handler_data

2015-09-15 17:06:29 +02:00

platform.c

drivercore: Fix unregistration path of platform devices

2015-08-25 11:29:57 -05:00

property.c

device property: Don't overwrite addr when failing in device_get_mac_address

2015-09-08 13:40:23 -07:00

soc.c

drivers/base: use tabs where possible in code indentation

2015-03-25 14:37:35 +01:00

syscore.c

genirq: Simplify wakeup mechanism

2014-09-01 13:48:59 +02:00

topology.c

sched/topology: Rename topology_thread_cpumask() to topology_sibling_cpumask()

2015-05-27 15:22:15 +02:00

transport_class.c

…