diff options
| author | Martin Sperl <kernel@martin.sperl.org> | 2015-05-25 10:13:10 +0000 |
|---|---|---|
| committer | Mark Brown <broonie@kernel.org> | 2015-06-02 21:54:56 +0100 |
| commit | 4b786458ed99eae9e9d9984a1624a79e9bf6cebb (patch) | |
| tree | 99ce1090513a7c1901d2e0dfe0c34b213015ef9e /drivers/spi/spi-fsl-espi.c | |
| parent | 8e76ef88f607174082023f50b87fe12dcdbe5db5 (diff) | |
| download | linux-4b786458ed99eae9e9d9984a1624a79e9bf6cebb.tar.bz2 | |
spi: restore rx/tx_buf in case of unset CONFIG_HAS_DMA
The case where spi_master sets the flags SPI_MASTER_MUST_RX/TX while
CONFIG_HAS_DMA is unset (which is unlikley) together with a driver
that reuses spi_messages with rx/tx_buff set to NULL, can result in:
* data disclosure over the SPI (for tx_buf == NULL)
* memory corruption (for rx_buf == NULL)
This happenes when dummy_rx/dummy_tx are changing address due to krealloc
or free and an allocation of the memory by a different part of the kernel.
Signed-off-by: Martin Sperl <kernel@martin.sperl.org>
Signed-off-by: Mark Brown <broonie@kernel.org>
Diffstat (limited to 'drivers/spi/spi-fsl-espi.c')
0 files changed, 0 insertions, 0 deletions