media: rockchip/rga: use 64-bit arithmetic instead of 32-bit
authorGustavo A. R. Silva <gustavo@embeddedor.com>
Tue, 6 Feb 2018 16:51:18 +0000 (11:51 -0500)
committerMauro Carvalho Chehab <mchehab@s-opensource.com>
Mon, 26 Feb 2018 13:09:21 +0000 (08:09 -0500)
Cast p to dma_addr_t in order to avoid a potential integer overflow.
This variable is being used in a context that expects an expression
of type dma_addr_t (u64).

The expression p << PAGE_SHIFT is currently being evaluated
using 32-bit arithmetic.

Addresses-Coverity-ID: 1458347 ("Unintentional integer overflow")

Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
drivers/media/platform/rockchip/rga/rga-buf.c

index 49cacc7a48d1be1389f9e38890886f02a1264d23..fa1ba98c96dc43753041f55f9bd11dd8532b2586 100644 (file)
@@ -140,7 +140,8 @@ void rga_buf_map(struct vb2_buffer *vb)
                address = sg_phys(sgl);
 
                for (p = 0; p < len; p++) {
-                       dma_addr_t phys = address + (p << PAGE_SHIFT);
+                       dma_addr_t phys = address +
+                                         ((dma_addr_t)p << PAGE_SHIFT);
 
                        pages[mapped_size + p] = phys;
                }