linux-kernel - Re: [PATCHv2] dmaengine: ti: edma: Fix memory allocation size for queue_priority

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <175680573537.233989.3534240892584425378.b4-ty@kernel.org>
Date: Tue, 02 Sep 2025 15:05:35 +0530
From: Vinod Koul <vkoul@...nel.org>
To: peter.ujfalusi@...il.com, nathan@...nel.org, 
 Anders Roxell <anders.roxell@...aro.org>
Cc: dmaengine@...r.kernel.org, linux-kernel@...r.kernel.org, 
 llvm@...ts.linux.dev, dan.carpenter@...aro.org, arnd@...db.de, 
 benjamin.copeland@...aro.org
Subject: Re: [PATCHv2] dmaengine: ti: edma: Fix memory allocation size for
 queue_priority_map


On Sat, 30 Aug 2025 11:49:53 +0200, Anders Roxell wrote:
> Fix a critical memory allocation bug in edma_setup_from_hw() where
> queue_priority_map was allocated with insufficient memory. The code
> declared queue_priority_map as s8 (*)[2] (pointer to array of 2 s8),
> but allocated memory using sizeof(s8) instead of the correct size.
> 
> This caused out-of-bounds memory writes when accessing:
>   queue_priority_map[i][0] = i;
>   queue_priority_map[i][1] = i;
> 
> [...]

Applied, thanks!

[1/1] dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
      commit: e63419dbf2ceb083c1651852209c7f048089ac0f

Best regards,
-- 
~Vinod