8f9e91ad03
These patches were generated from: https://github.com/raspberrypi/linux/commits/rpi-6.12.y With the following command: git format-patch -N v6.12.27..HEAD (HEAD -> 8d3206ee456a5ecdf9ddbfd8e5e231e4f0cd716e) Exceptions: - (def)configs patches - github workflows patches - applied & reverted patches - readme patches - wireless patches Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
33 lines
1.1 KiB
Diff
33 lines
1.1 KiB
Diff
From 1da919da52eb90ac5eb1e5060ab5358a4ac8385e Mon Sep 17 00:00:00 2001
|
|
From: popcornmix <popcornmix@gmail.com>
|
|
Date: Tue, 23 Apr 2024 09:51:36 +0100
|
|
Subject: [PATCH] dw-axi-dmac-platform: Avoid trampling with zero length buffer
|
|
|
|
This code:
|
|
for_each_sg(sgl, sg, sg_len, i)
|
|
num_sgs += DIV_ROUND_UP(sg_dma_len(sg), axi_block_len);
|
|
|
|
determines how many hw_desc are allocated.
|
|
If sg_dma_len(sg)=0 we don't allocate for this sgl.
|
|
|
|
However in the next loop, we will increment loop
|
|
for this case, and loop gets higher than num_sgs
|
|
and we trample memory.
|
|
|
|
Signed-off-by: Dom Cobley <popcornmix@gmail.com>
|
|
---
|
|
drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 3 +++
|
|
1 file changed, 3 insertions(+)
|
|
|
|
--- a/drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c
|
|
+++ b/drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c
|
|
@@ -963,6 +963,9 @@ dw_axi_dma_chan_prep_slave_sg(struct dma
|
|
mem = sg_dma_address(sg);
|
|
len = sg_dma_len(sg);
|
|
num_segments = DIV_ROUND_UP(sg_dma_len(sg), axi_block_len);
|
|
+ if (!num_segments)
|
|
+ continue;
|
|
+
|
|
segment_len = DIV_ROUND_UP(sg_dma_len(sg), num_segments);
|
|
|
|
do {
|