| Age | Commit message (Collapse) | Author |
|---|
|
s-keystone-qcom-dev
* changes:
[automerger] ADSPRPC: Pass 64 bit va buffer to remote_mmap64 from remote_mmap am: 5441a5be1a
ADSPRPC: Pass 64 bit va buffer to remote_mmap64 from remote_mmap
|
|
API remote_mmap is a wrapper that calls remote_mmap64 with
32 bit VA buffer. API remote_mmap64 will write 64 bit to VA
buffer, which will result in buffer overflow.
Adding intermediate 64 bit buffer in between call to remote_mmap64
and then safely copying from 64 bit buffer to 32 bit buffer.
CRs-Fixed: 2960630
Change-Id: I1a1671e0150bbd6305fea4d2805bc62807b89b3b
|
|
Observed use after free issue when passed handle that has been
closed as part of a negative test. On function verify_local_handle()
we receive local handle and try to dereference but local handle
has already been freed. Solution is to check if handle is still
open by traversing list of all handles that have been opened for
all domains.
CRs-Fixed: 2944637
Change-Id: I2a3afb655c08c4e4ece2f74659d5d94a0d29523d
|
|
Currently dlerrstr is uninitialized. When DSP fails to update dlerrstr
string due to any reason, an uninitialized dlerrstr is getting printed
which will access beyond 255 bytes. By initializing this string to NULL,
we will make sure that we do not access beyond the size allocated even
in case of any DSP related failures.
CRs-Fixed: 2653730
Change-Id: I2f91fd2c80933f89042366dbe8aceef10b0dfe8e
|
|
Add a NULL pointer check for input buffer in remote register
buf API.
CRs-Fixed: 2564995
Change-Id: I43ce29e67cf8b9ca80d07169c78b7451eb5eada2
|
|
Imports latest fastrpc code from upstream-master branch. This import is
based off of c2d1cdc0fb781ee673077c5d4b243eb239c73bb5 from here -
https://android.googlesource.com/platform/external/fastrpc/+/refs/heads/upstream-master
Bug: 144318980
Test: N/A
|
