diff options
Diffstat (limited to 'target/linux/bcm27xx/patches-4.19/950-0687-Limit-max_req_size-under-arm64-or-any-other-platform.patch')
| -rw-r--r-- | target/linux/bcm27xx/patches-4.19/950-0687-Limit-max_req_size-under-arm64-or-any-other-platform.patch | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/target/linux/bcm27xx/patches-4.19/950-0687-Limit-max_req_size-under-arm64-or-any-other-platform.patch b/target/linux/bcm27xx/patches-4.19/950-0687-Limit-max_req_size-under-arm64-or-any-other-platform.patch new file mode 100644 index 0000000000..87b4e9b58a --- /dev/null +++ b/target/linux/bcm27xx/patches-4.19/950-0687-Limit-max_req_size-under-arm64-or-any-other-platform.patch @@ -0,0 +1,33 @@ +From 7bfcb31431f06efc233e4cc4d7ab65e10a6522cd Mon Sep 17 00:00:00 2001 +From: Yaroslav Rosomakho <yaroslavros@gmail.com> +Date: Fri, 23 Aug 2019 11:02:22 +0200 +Subject: [PATCH] Limit max_req_size under arm64 (or any other platform + that uses swiotlb) to prevent potential buffer overflow due to bouncing. + +Signed-off-by: Yaroslav Rosomakho <yaroslavros@gmail.com> +--- + drivers/mmc/host/bcm2835-mmc.c | 6 +++++- + 1 file changed, 5 insertions(+), 1 deletion(-) + +--- a/drivers/mmc/host/bcm2835-mmc.c ++++ b/drivers/mmc/host/bcm2835-mmc.c +@@ -38,6 +38,7 @@ + #include <linux/dmaengine.h> + #include <linux/dma-mapping.h> + #include <linux/of_dma.h> ++#include <linux/swiotlb.h> + + #include "sdhci.h" + +@@ -1374,7 +1375,10 @@ static int bcm2835_mmc_add_host(struct b + } + #endif + mmc->max_segs = 128; +- mmc->max_req_size = 524288; ++ if (swiotlb_max_segment()) ++ mmc->max_req_size = (1 << IO_TLB_SHIFT) * IO_TLB_SEGSIZE; ++ else ++ mmc->max_req_size = 524288; + mmc->max_seg_size = mmc->max_req_size; + mmc->max_blk_size = 512; + mmc->max_blk_count = 65535; |