linux/drivers/firmware
Dan Carpenter ddfade88f4 firmware: arm_ffa: Fix memory corruption in ffa_msg_send2()
The "msg" pointer is a struct and msg->offset is the sizeof(*msg).  The
pointer here math means the memcpy() will write outside the bounds.
Cast "msg" to a u8 pointer to fix this.

Fixes: 02c19d84c7 ("firmware: arm_ffa: Add support for FFA_MSG_SEND2")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/cd5fb6b5-81fa-4a6d-b2b8-284ca704bbff@moroto.mountain
Signed-off-by: Sudeep Holla <sudeep.holla@arm.com>
2024-04-24 14:19:45 +01:00
..
arm_ffa firmware: arm_ffa: Fix memory corruption in ffa_msg_send2() 2024-04-24 14:19:45 +01:00
arm_scmi ARM cpufreq updates for 6.9 2024-03-15 13:12:26 +01:00
broadcom
cirrus firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid 2024-03-07 13:03:54 +00:00
efi EFI fixes for v6.9 #2 2024-03-24 13:54:06 -07:00
google firmware: coreboot: Replace tag with id table in driver struct 2024-02-17 08:53:06 +08:00
imx
meson
microchip RISC-V firmware drivers for v6.9 2024-03-06 07:42:08 +01:00
psci
qcom
smccc
tegra firmware: tegra: bpmp: Return directly after a failed kzalloc() in get_filename() 2024-02-21 17:10:32 +01:00
xilinx firmware: xilinx: Add ZynqMP efuse access API 2024-03-07 20:21:53 +00:00
arm_scpi.c
arm_sdei.c
dmi_scan.c
dmi-id.c
dmi-sysfs.c
edd.c
iscsi_ibft_find.c
iscsi_ibft.c
Kconfig video: Add helpers for decoding screen_info 2024-02-14 10:09:13 +01:00
Makefile Core: 2024-01-12 13:54:25 -08:00
memmap.c
mtk-adsp-ipc.c firmware: mtk-adsp-ipc: Convert to platform remove callback returning void 2024-01-04 17:01:14 +01:00
qemu_fw_cfg.c crash: split vmcoreinfo exporting code out from crash_core.c 2024-02-23 17:48:22 -08:00
raspberrypi.c firmware: raspberrypi: Convert to platform remove callback returning void 2024-01-04 17:01:15 +01:00
stratix10-rsu.c firmware: stratix10-rsu: Convert to platform remove callback returning void 2024-01-04 17:01:15 +01:00
stratix10-svc.c firmware: stratix10-svc: Convert to platform remove callback returning void 2024-01-04 17:01:15 +01:00
sysfb_simplefb.c firmware/sysfb: Set firmware-framebuffer parent device 2024-02-14 10:09:17 +01:00
sysfb.c firmware/sysfb: fix an error code in sysfb_init() 2024-02-27 09:21:06 +01:00
ti_sci.c
ti_sci.h
trusted_foundations.c
turris-mox-rwtm.c firmware: turris-mox-rwtm: Convert to platform remove callback returning void 2024-01-04 17:01:15 +01:00