mirror of
https://github.com/followmsi/android_kernel_google_msm.git
synced 2024-11-06 23:17:41 +00:00
dmaengine: at_hdmac: check that each sg data length is non-null
commit c456797681
upstream.
Avoid the construction of a malformed DMA request sent to
the DMA controller.
Log message is for debug only because this condition is unlikely to
append and may only trigger at driver development time.
Signed-off-by: Nicolas Ferre <nicolas.ferre@atmel.com>
Signed-off-by: Vinod Koul <vinod.koul@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
8dd47c73d9
commit
87a34202d0
1 changed files with 11 additions and 0 deletions
|
@ -691,6 +691,11 @@ atc_prep_slave_sg(struct dma_chan *chan, struct scatterlist *sgl,
|
||||||
|
|
||||||
mem = sg_dma_address(sg);
|
mem = sg_dma_address(sg);
|
||||||
len = sg_dma_len(sg);
|
len = sg_dma_len(sg);
|
||||||
|
if (unlikely(!len)) {
|
||||||
|
dev_dbg(chan2dev(chan),
|
||||||
|
"prep_slave_sg: sg(%d) data length is zero\n", i);
|
||||||
|
goto err;
|
||||||
|
}
|
||||||
mem_width = 2;
|
mem_width = 2;
|
||||||
if (unlikely(mem & 3 || len & 3))
|
if (unlikely(mem & 3 || len & 3))
|
||||||
mem_width = 0;
|
mem_width = 0;
|
||||||
|
@ -726,6 +731,11 @@ atc_prep_slave_sg(struct dma_chan *chan, struct scatterlist *sgl,
|
||||||
|
|
||||||
mem = sg_dma_address(sg);
|
mem = sg_dma_address(sg);
|
||||||
len = sg_dma_len(sg);
|
len = sg_dma_len(sg);
|
||||||
|
if (unlikely(!len)) {
|
||||||
|
dev_dbg(chan2dev(chan),
|
||||||
|
"prep_slave_sg: sg(%d) data length is zero\n", i);
|
||||||
|
goto err;
|
||||||
|
}
|
||||||
mem_width = 2;
|
mem_width = 2;
|
||||||
if (unlikely(mem & 3 || len & 3))
|
if (unlikely(mem & 3 || len & 3))
|
||||||
mem_width = 0;
|
mem_width = 0;
|
||||||
|
@ -759,6 +769,7 @@ atc_prep_slave_sg(struct dma_chan *chan, struct scatterlist *sgl,
|
||||||
|
|
||||||
err_desc_get:
|
err_desc_get:
|
||||||
dev_err(chan2dev(chan), "not enough descriptors available\n");
|
dev_err(chan2dev(chan), "not enough descriptors available\n");
|
||||||
|
err:
|
||||||
atc_desc_put(atchan, first);
|
atc_desc_put(atchan, first);
|
||||||
return NULL;
|
return NULL;
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue