+-- On Fri, 11 Sep 2020, Alexander Bulekov wrote --+
| > On 200911 2257, Li Qiang wrote:
| > > Could you also provide the reproducer?
* Sorry, we can not share reproducers on the list, I'm afraid.
* Thank you Alex for the -qtests.
| > > I think it is better to split this patch to 2 or three as
On 200911 1520, Alexander Bulekov wrote:
> On 200911 2257, Li Qiang wrote:
> > P J P 于2020年9月11日周五 下午8:30写道：
> > >
> > > From: Prasad J Pandit
> > >
> > > While servicing the OHCI transfer descriptors(TD), OHCI host
> > > controller derives variables 'start_addr', 'end_addr', 'len'
> > > etc.
On 200911 2257, Li Qiang wrote:
> P J P 于2020年9月11日周五 下午8:30写道：
> >
> > From: Prasad J Pandit
> >
> > While servicing the OHCI transfer descriptors(TD), OHCI host
> > controller derives variables 'start_addr', 'end_addr', 'len'
> > etc. from values supplied by the host controller driver.
> >
P J P 于2020年9月11日周五 下午8:30写道：
>
> From: Prasad J Pandit
>
> While servicing the OHCI transfer descriptors(TD), OHCI host
> controller derives variables 'start_addr', 'end_addr', 'len'
> etc. from values supplied by the host controller driver.
> Host controller driver may supply values such that
From: Prasad J Pandit
While servicing the OHCI transfer descriptors(TD), OHCI host
controller derives variables 'start_addr', 'end_addr', 'len'
etc. from values supplied by the host controller driver.
Host controller driver may supply values such that using
above variables leads to out-of-bounds
