blob: 621cc549ea287702f711d4819009f7ae6b61fe15 (
plain) (
blame)
1
2
3
4
|
sdhci: DMA reentrancy issue leads to an infinite loop
Description of problem:
When sdhci transfers multiple blocks, it doesnot check if the dma-write buffer pointer overlaps with its MMIO region, crafted content can cause DoS because of infinite loop and CPU consumption.
|