Skip to content
Commit fb76c39f authored by Krishna chaitanya chundru's avatar Krishna chaitanya chundru Committed by Gerrit - the friendly Code Review server
Browse files

bus: mhi: misc: Add check for dev_rp if it is iommu range or not


er_ctxt->rp pointer is updated by MDM which is untrusted to HLOS,
it could be arbitrary value.

If there is security issue on MDM, and updated pointer which is not
align then driver will never come out of loop where checking against
dev_rp != rp.

So added check to make sure it is in the buffer range & aligned to 128bit.

Change-Id: Ib484e07f2c75fcd657a4ccc648a3a20de3edeebc
Signed-off-by: default avatarKrishna chaitanya chundru <quic_krichai@quicinc.com>
parent 160ae983
Please register or to comment