qemu-irix/hw
Prasad J Pandit 146871c33e dma: omap: check dma channel data_type
When setting dma channel 'data_type', if (value & 3) == 3,
the set 'data_type' is said to be bad. This also leads to an
OOB access in 'omap_dma_transfer_generic', while doing
cpu_physical_memory_r/w operations. Add check to avoid it.

Reported-by: Jiang Xin <jiangxin1@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20170127120528.30959-1-ppandit@redhat.com
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
2017-01-27 15:29:08 +00:00
..
9pfs This pull request fixes a 2.9 regression and a long standing bug that can 2017-01-25 17:54:14 +00:00
acpi machine: Make possible_cpu_arch_ids() return const pointer 2017-01-23 21:25:37 -02:00
adc
alpha
arm armv7m: Replace armv7m.hack with unassigned_access handler 2017-01-27 15:20:21 +00:00
audio es1370: wire up reset via DeviceClass 2017-01-11 09:19:03 +01:00
block pflash_cfi01: fix per-device sector length in CFI table 2017-01-27 15:20:22 +00:00
bt
char hw/char/exynos4210_uart: Drop unused local variable frame_size 2017-01-27 15:29:08 +00:00
core hw: Fix typos found by codespell 2017-01-24 23:26:52 +03:00
cpu
cris
display trivial patches for 2017-01-24 2017-01-25 10:42:26 +00:00
dma dma: omap: check dma channel data_type 2017-01-27 15:29:08 +00:00
gpio i2c: Allow I2C devices to NAK start events 2017-01-09 11:40:20 +00:00
i2c arm: Uniquely name imx25 I2C buses. 2017-01-20 11:15:06 +00:00
i386 hw/i386/kvmvapic: Remove dead code in patch_hypercalls() 2017-01-24 23:26:53 +03:00
ide
input gtk,vnc: misc bugfixes. 2017-01-10 14:52:34 +00:00
intc arm_gicv3: Fix broken logic in ELRSR calculation 2017-01-27 15:29:08 +00:00
ipack
ipmi
isa hw/isa/isa-bus: Set category of the "isabus-bridge" device 2017-01-24 23:26:54 +03:00
lm32 fw-cfg: support writeable blobs 2017-01-18 22:59:53 +02:00
m68k m68k: QOMify the MCF Fast Ethernet Controller device 2017-01-20 10:36:38 +08:00
mem
microblaze
mips
misc migration: disallow migrate_add_blocker during migration 2017-01-24 18:00:30 +00:00
moxie
net arm: stellaris: make MII accesses complete immediately 2017-01-27 15:29:08 +00:00
nios2 nios2: Add Altera 10M50 GHRD emulation 2017-01-24 13:10:35 -08:00
nvram migration: extend VMStateInfo 2017-01-24 17:54:47 +00:00
openrisc
pci trivial patches for 2017-01-24 2017-01-25 10:42:26 +00:00
pci-bridge PCI/migration merge vmstate_pci_device and vmstate_pcie_device 2017-01-24 18:00:31 +00:00
pci-host
pcmcia
ppc hw: Fix typos found by codespell 2017-01-24 23:26:52 +03:00
s390x hw: Fix typos found by codespell 2017-01-24 23:26:52 +03:00
scsi trivial patches for 2017-01-24 2017-01-25 10:42:26 +00:00
sd
sh4 cputlb: drop flush_global flag from tlb_flush 2017-01-13 14:24:37 +00:00
smbios stubs: move smbios stubs to hw/smbios 2017-01-16 17:52:35 +01:00
sparc
sparc64 target-sparc: fix up niagara machine 2017-01-18 22:03:44 +01:00
ssi aspeed/smc: handle dummy bytes when doing fast reads in command mode 2017-01-27 15:20:20 +00:00
timer nios2 target support 2017-01-25 13:30:23 +00:00
tpm
tricore
unicore32
usb trivial patches for 2017-01-24 2017-01-25 10:42:26 +00:00
vfio vfio: remove a duplicated word in comments 2017-01-24 23:26:53 +03:00
virtio trivial patches for 2017-01-24 2017-01-25 10:42:26 +00:00
watchdog
xen
xenpv
xtensa target/xtensa: refactor CCOUNT/CCOMPARE 2017-01-15 13:01:55 -08:00
Makefile.objs acpi: filter based on CONFIG_ACPI_X86 rather than TARGET 2017-01-16 17:52:35 +01:00