Nicolas Boichat de327e4966 spi: mediatek: Prevent overflows in FIFO transfers ...

In the case where transfer length is not a multiple of 4, KASAN
reports 2 out-of-bounds memory accesses:
 - mtk_spi_interrupt: ioread32_rep writes past the end of
   trans->rx_buf.
 - mtk_spi_fifo_transfer: iowrite32_rep reads past the end of
   xfer->tx_buf.

Fix this by using memcpy on the remainder of the bytes.

Signed-off-by: Nicolas Boichat <drinkcat@chromium.org>
Signed-off-by: Mark Brown <broonie@kernel.org>

2015-12-30 17:26:40 +00:00

..

Kconfig

Merge remote-tracking branches 'spi/topic/fsl-dspi', 'spi/topic/mpc512x', 'spi/topic/mtk', 'spi/topic/oc-tiny' and 'spi/topic/octeon' into spi-next

2015-11-04 11:02:10 +00:00

Makefile

spi: bcm2835aux: add bcm2835 auxiliary spi device driver

2015-10-07 11:42:57 +01:00

spi-adi-v3.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-altera.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-ath79.c

spi: ath79: simplify iomem resource mapping

2015-09-30 20:33:29 +01:00

spi-atmel.c

Merge remote-tracking branches 'spi/topic/ath97', 'spi/topic/atmel', 'spi/topic/au1550', 'spi/topic/bcm2835' and 'spi/topic/bcm2835aux' into spi-next

2015-11-04 11:02:04 +00:00

spi-au1550.c

spi: au1550: Simplify au1550_spi_setupxfer()

2015-09-16 20:54:54 +01:00

spi-bcm53xx.c

spi: bcm53xx: Adjust devm usage

2015-09-16 17:42:28 +01:00

spi-bcm53xx.h

spi: bcm53xx: driver for SPI controller on Broadcom bcma SoC

2014-08-19 11:30:55 -05:00

spi-bcm63xx-hsspi.c

spi/bcm63xx-hsspi: add support for dual spi read/write

2015-08-25 17:33:49 +01:00

spi-bcm63xx.c

spi/bcm63xx: move register definitions into the driver

2015-10-23 01:19:58 +09:00

spi-bcm2835.c

Merge remote-tracking branches 'spi/topic/ath97', 'spi/topic/atmel', 'spi/topic/au1550', 'spi/topic/bcm2835' and 'spi/topic/bcm2835aux' into spi-next

2015-11-04 11:02:04 +00:00

spi-bcm2835aux.c

spi: bcm2835aux: change initialization order and switch to platform_get_irq

2015-10-16 15:35:33 +01:00

spi-bfin5xx.c

spi: spi-bfin5xx: Calculate transfer speed unconditionally

2015-09-16 20:54:32 +01:00

spi-bfin-sport.c

spi: bfin-sport: Calculate transfer speed unconditionally

2015-09-16 20:53:45 +01:00

spi-bitbang-txrx.h

spi: Fix regression in spi-bitbang-txrx.h

2015-07-29 15:01:07 +01:00

spi-bitbang.c

spi: bitbang: switch to the generic implementation of transfer_one_message

2015-10-05 14:55:56 +01:00

spi-butterfly.c

spi: Remove FSF mailing addresses

2014-12-22 15:32:42 +00:00

spi-cadence.c

Merge remote-tracking branches 'spi/topic/atmel', 'spi/topic/cadence', 'spi/topic/dw' and 'spi/topic/fsl-cpm' into spi-next

2014-12-08 12:17:12 +00:00

spi-clps711x.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-coldfire-qspi.c

spi: spi-coldfire-qspi: enable RuntimePM before registering to the core

2015-10-12 17:02:08 +01:00

spi-davinci.c

Merge remote-tracking branch 'spi/topic/davinci' into spi-next

2015-11-04 11:02:02 +00:00

spi-dln2.c

spi/dln2: simplify return flow for dln2_spi_transfer_setup and dln2_spi_enable

2015-01-06 17:02:50 +00:00

spi-dw-mid.c

spi: dw-spi: Convert 16bit accesses to 32bit accesses

2015-03-17 12:27:09 +00:00

spi-dw-mmio.c

spi: dw-mmio: convert to unified device property API

2015-10-19 20:32:01 +01:00

spi-dw-pci.c

spi: dw-pci: remove unused pdev member from struct dw_spi_pci

2015-10-19 20:32:01 +01:00

spi-dw.c

spi: dw: replace magic constant by DW_SPI_DR

2015-10-28 09:17:48 +09:00

spi-dw.h

spi: dw: introduce spi_shutdown_chip()

2015-10-19 20:32:01 +01:00

spi-efm32.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-ep93xx.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-falcon.c

Merge remote-tracking branches 'spi/topic/falcon', 'spi/topic/fsf', 'spi/topic/fsl', 'spi/topic/fsl-dspi' and 'spi/topic/gpio' into spi-next

2015-02-08 11:16:46 +08:00

spi-fsl-cpm.c

spi: fsl-spi: fix devm_ioremap_resource() error case

2015-04-24 13:27:53 +01:00

spi-fsl-cpm.h

…

spi-fsl-dspi.c

spi: spi-fsl-dspi: Remove duplicated register write

2015-09-17 18:35:59 +01:00

spi-fsl-espi.c

spi: fsl-(e)spi: Fix checking return value of devm_ioremap_resource

2015-08-30 12:14:36 +01:00

spi-fsl-lib.c

spi: fsl-(e)spi: simplify cleanup code

2015-08-28 18:15:18 +01:00

spi-fsl-lib.h

spi: fsl-(e)spi: simplify cleanup code

2015-08-28 18:15:18 +01:00

spi-fsl-spi.c

spi: fsl-(e)spi: Fix checking return value of devm_ioremap_resource

2015-08-30 12:14:36 +01:00

spi-fsl-spi.h

…

spi-gpio.c

Merge remote-tracking branches 'spi/topic/falcon', 'spi/topic/fsf', 'spi/topic/fsl', 'spi/topic/fsl-dspi' and 'spi/topic/gpio' into spi-next

2015-02-08 11:16:46 +08:00

spi-img-spfi.c

Merge remote-tracking branches 'spi/topic/dw', 'spi/topic/fsl-espi', 'spi/topic/img-spfi' and 'spi/topic/mpc512x-psc' into spi-next

2015-08-31 14:45:32 +01:00

spi-imx.c

spi: imx: fix ecspi mode setup

2015-10-23 02:07:52 +09:00

spi-lm70llp.c

spi: Remove FSF mailing addresses

2014-12-22 15:32:42 +00:00

spi-meson-spifc.c

spi: meson: Fix module autoload for OF platform driver

2015-09-19 07:55:25 -07:00

spi-mpc52xx-psc.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-mpc52xx.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-mpc512x-psc.c

spi: mpc512x: Call mpc512x_psc_spi_transfer_setup() unconditionally

2015-09-17 12:33:31 +01:00

spi-mt65xx.c

spi: mediatek: Prevent overflows in FIFO transfers

2015-12-30 17:26:40 +00:00

spi-mxs.c

spi: mxs: cleanup wait_for_completion return handling

2015-02-05 18:04:57 +00:00

spi-nuc900.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-oc-tiny.c

spi: oc-tiny: Use of_property_read_u32 instead of open-coding it

2015-09-16 19:16:01 +01:00

spi-octeon.c

spi: octeon: Use transfer speed unconditionally

2015-09-16 20:53:19 +01:00

spi-omap2-mcspi.c

spi: omap2-mcspi: disable other channels CHCONF_FORCE in prepare_message

2015-10-22 15:26:22 +01:00

spi-omap-100k.c

spi: omap-100k: Rely on validations done by spi core

2015-09-17 12:34:20 +01:00

spi-omap-uwire.c

spi: omap-uwire: Remove needless bits_per_word and speed_hz tests

2015-09-17 12:33:58 +01:00

spi-orion.c

spi: orion: On a38x, implement "50MHZ SPI AC timing" Erratum No. FE-9144572

2015-08-11 17:21:08 +01:00

spi-pl022.c

Merge remote-tracking branches 'spi/topic/omap-100k', 'spi/topic/omap-uwire', 'spi/topic/pl022', 'spi/topic/pm' and 'spi/topic/pxa2xx' into spi-next

2015-04-11 23:09:18 +01:00

spi-ppc4xx.c

spi: bitbang: Replace spinlock by mutex

2015-09-17 12:13:40 +01:00

spi-pxa2xx-dma.c

spi: pxa2xx: Remove empty function pxa2xx_spi_dma_resume()

2015-10-01 17:26:27 +01:00

spi-pxa2xx-pci.c

spi: spi-pxa2xx: Remove clk.h include

2015-07-15 12:35:02 +01:00

spi-pxa2xx.c

Merge remote-tracking branches 'spi/topic/omap-100k', 'spi/topic/omap-uwire', 'spi/topic/owner', 'spi/topic/pxa' and 'spi/topic/pxa2xx' into spi-next

2015-11-04 11:02:12 +00:00

spi-pxa2xx.h

Merge remote-tracking branches 'spi/topic/omap-100k', 'spi/topic/omap-uwire', 'spi/topic/owner', 'spi/topic/pxa' and 'spi/topic/pxa2xx' into spi-next

2015-11-04 11:02:12 +00:00

spi-qup.c

Merge remote-tracking branches 'spi/topic/qup', 'spi/topic/rockchip', 'spi/topic/rspi', 'spi/topic/s3c64xx' and 'spi/topic/sc18is602' into spi-next

2015-04-11 23:09:25 +01:00

spi-rb4xx.c

spi: rb4xx: Fix checking return value of devm_ioremap_resource()

2015-05-01 17:35:54 +01:00

spi-rockchip.c

spi/rockchip: remove unnecessary memset of rockchip_spi

2015-07-07 13:12:50 +01:00

spi-rspi.c

spi: rspi: Make qspi_set_send_trigger() return "unsigned int"

2015-07-03 13:52:10 +01:00

spi-s3c24xx-fiq.h

…

spi-s3c24xx-fiq.S

…

spi-s3c24xx.c

spi: bitbang: Replace spinlock by mutex

2015-09-17 12:13:40 +01:00

spi-s3c64xx.c

spi: s3c64xx: Use transfer speed unconditionally

2015-09-16 20:53:04 +01:00

spi-sc18is602.c

Merge remote-tracking branches 'spi/topic/qup', 'spi/topic/rockchip', 'spi/topic/rspi', 'spi/topic/s3c64xx' and 'spi/topic/sc18is602' into spi-next

2015-04-11 23:09:25 +01:00

spi-sh-hspi.c

spi: Remove FSF mailing addresses

2014-12-22 15:32:42 +00:00

spi-sh-msiof.c

spi: sh-msiof: Fix FIFO size to 64 word from 256 word

2015-08-31 14:42:40 +01:00

spi-sh-sci.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-sh.c

spi: Remove FSF mailing addresses

2014-12-22 15:32:42 +00:00

spi-sirf.c

spi: sirf: add the reset for USP-based SPI

2015-05-26 11:39:16 +01:00

spi-st-ssc4.c

spi: constify of_device_id array

2015-03-17 12:15:22 +00:00

spi-sun4i.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-sun6i.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-tegra20-sflash.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-tegra20-slink.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-tegra114.c

spi: drop owner assignment from platform_drivers

2014-10-20 16:21:36 +02:00

spi-ti-qspi.c

Merge remote-tracking branches 'spi/topic/s3c64xx', 'spi/topic/ti-qspi' and 'spi/topic/txx9' into spi-next

2015-11-04 11:02:16 +00:00

spi-tle62x0.c

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

spi-topcliff-pch.c

spi: Remove FSF mailing addresses

2014-12-22 15:32:42 +00:00

spi-txx9.c

spi: txx9: Use transfer speed unconditionally

2015-09-16 20:52:52 +01:00

spi-xcomm.c

spi: xcomm: Export I2C module alias information

2015-07-31 18:14:57 +01:00

spi-xilinx.c

spi/spi-xilinx: Fix race condition on last word read

2015-10-29 09:03:42 +09:00

spi-xlp.c

spi/xlp: SPI controller driver for Netlogic XLP SoCs

2015-08-28 18:22:19 +01:00

spi-xtensa-xtfpga.c

spi: xtensa-xtfpga: fix register endianness

2015-09-22 09:30:10 -07:00

spi-zynqmp-gqspi.c

spi: zynq: missing break statement

2015-07-07 19:47:50 +01:00

spi.c

Merge remote-tracking branches 'spi/topic/omap-100k', 'spi/topic/omap-uwire', 'spi/topic/owner', 'spi/topic/pxa' and 'spi/topic/pxa2xx' into spi-next

2015-11-04 11:02:12 +00:00

spidev.c

Merge remote-tracking branches 'spi/topic/omap-100k', 'spi/topic/omap-uwire', 'spi/topic/owner', 'spi/topic/pxa' and 'spi/topic/pxa2xx' into spi-next

2015-11-04 11:02:12 +00:00