Commit 2e883273 authored by bodala's avatar bodala
Browse files

bus: mhi: misc: Add check for dev_rp if it is iommu range or not..



er_ctxt->rp pointer is updated by MDM which is untrusted to HLOS,
it could be arbitrary value.

If there is security issue on MDM, and updated pointer which is not
align then driver will never come out of loop where checking against
dev_rp != rp.

So added check to make sure it is in the buffer range & aligned to 128bit.

Change-Id: Ib484e07f2c75fcd657a4ccc648a3a20de3edeebc
Signed-off-by: default avatarKrishna chaitanya chundru <quic_krichai@quicinc.com>
Signed-off-by: default avatarParas Sharma <quic_parass@quicinc.com>
(cherry picked from commit fd53225c)
(cherry picked from commit a092e21a)
Signed-off-by: default avatarbodala <quic_bodala@quicinc.com>
parent 895e087e
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment