On Fri, 15 May 2026 17:16:03 +0800, Junrui Luo wrote:
> fastrpc_get_args() uses find_vma() to look up the VMA for a user-provided
> pointer and compute a DMA address offset. When the address falls in a gap
> before the returned VMA, (ptr & PAGE_MASK) - vma->vm_start underflows,
> corrupting the DMA address sent to the DSP.
>
> Replace find_vma() with vma_lookup(), which returns NULL when the address
> is not contained within any VMA.
>
> [...]
Applied, thanks!
[1/1] misc: fastrpc: fix DMA address corruption due to find_vma misuse
commit: 03f669db42e9804f8e6f1e41dbe6dc1f22b7757c
Best regards,
--
Srinivas Kandagatla <[email protected]>
