Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 35889d1b authored by Linux Build Service Account's avatar Linux Build Service Account Committed by Gerrit - the friendly Code Review server
Browse files

Merge "msm: ADSPRPC: validate user buffers after copying from user"

parents cc4d9e15 4ea0eac2

drivers/char/adsprpc.c

+4 −0
Original line number Diff line number Diff line
@@ -2442,6 +2442,10 @@ static long fastrpc_device_ioctl(struct file *file, unsigned int ioctl_num, 
		if (!size)

			size = sizeof(struct fastrpc_ioctl_init_attrs);

		VERIFY(err, 0 == copy_from_user(&p.init, param, size));

		if (err)

			goto bail;

		VERIFY(err, p.init.init.filelen >= 0 &&

			p.init.init.memlen >= 0);

		if (err)

			goto bail;

		VERIFY(err, 0 == fastrpc_init_process(fl, &p.init));