Maggie White 31820ac49b mm: Fix incorrect type conversion for size during dma allocation ... This was found during userspace fuzzing test when a large size allocation is made from ion [<ffffffc00008a098>] show_stack+0x10/0x1c [<ffffffc00119c390>] dump_stack+0x74/0xc8 [<ffffffc00020d9a0>] kasan_report_error+0x2b0/0x408 [<ffffffc00020dbd4>] kasan_report+0x34/0x40 [<ffffffc00020cfec>] __asan_storeN+0x15c/0x168 [<ffffffc00020d228>] memset+0x20/0x44 [<ffffffc00009b730>] __dma_alloc_coherent+0x114/0x18c [<ffffffc00009c6e8>] __dma_alloc_noncoherent+0xbc/0x19c [<ffffffc000c2b3e0>] ion_cma_allocate+0x178/0x2f0 [<ffffffc000c2b750>] ion_secure_cma_allocate+0xdc/0x190 [<ffffffc000c250dc>] ion_alloc+0x264/0xb88 [<ffffffc000c25e94>] ion_ioctl+0x1f4/0x480 [<ffffffc00022f650>] do_vfs_ioctl+0x67c/0x764 [<ffffffc00022f790>] SyS_ioctl+0x58/0x8c Bug: 38195738 Signed-off-by: Rohit Vaswani <rvaswani@codeaurora.org> Signed-off-by: Maggie White <maggiewhite@google.com> Change-Id: I6b1a0a3eaec10500cd4e73290efad4023bc83da5 CVE-2017-9725 Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>		2019-08-08 12:19:52 +02:00
..
power	Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0	2019-08-06 11:41:21 +02:00
regmap	Merge tag 'v3.4.113' into lineage-16.0	2019-08-05 14:20:47 +02:00
Kconfig	misc: Import SM-G900H kernel source code	2019-08-02 15:14:10 +02:00
Makefile	drivers/pinctrl: grab default handles from device core	2013-06-14 13:34:07 -07:00
attribute_container.c	…
base.h	…
bus.c	Merge tag 'v3.4.113' into lineage-16.0	2019-08-05 14:20:47 +02:00
class.c	…
core.c	Merge tag 'v3.4.113' into lineage-16.0	2019-08-05 14:20:47 +02:00
cpu.c	…
dd.c	Merge tag 'v3.4.113' into lineage-16.0	2019-08-05 14:20:47 +02:00
devres.c	Merge tag 'v3.4.113' into lineage-16.0	2019-08-05 14:20:47 +02:00
devtmpfs.c	get rid of kern_path_parent()	2019-08-06 10:44:16 +02:00
dma-buf.c	…
dma-coherent.c	…
dma-contiguous.c	mm: Fix incorrect type conversion for size during dma allocation	2019-08-08 12:19:52 +02:00
dma-mapping.c	…
driver.c	…
firmware.c	…
firmware_class.c	firmware_class: Fix firmware_loading_timeout usage of jiffies	2019-08-05 14:21:56 +02:00
genlock.c	base: genlock: Zero a structure before sending it to user space	2013-10-16 09:08:09 -06:00
hypervisor.c	…
init.c	…
isa.c	…
map.c	…
memory.c	Merge tag 'v3.4.113' into lineage-16.0	2019-08-05 14:20:47 +02:00
module.c	…
node.c	…
pinctrl.c	drivers/pinctrl: grab default handles from device core	2013-06-14 13:34:07 -07:00
platform.c	Merge tag 'v3.4.113' into lineage-16.0	2019-08-05 14:20:47 +02:00
soc.c	…
sw_sync.c	Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0	2019-08-06 11:41:21 +02:00
sync.c	Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0	2019-08-06 11:41:21 +02:00
sys.c	…
syscore.c	…
topology.c	…
transport_class.c	…