Merge "msm: ipa3: Fix to validate the user inputs" (4953b87a) · Commits · e / devices / android_kernel_fairphone_FP3

drivers/platform/msm/ipa/ipa_v2/ipa_nat.c

+14 −0

Original line number	Diff line number	Diff line
		@@ -35,6 +35,13 @@ enum nat_table_type {
		#define NAT_TABLE_ENTRY_SIZE_BYTE 32
		#define NAT_INTEX_TABLE_ENTRY_SIZE_BYTE 4

		/*
		* Max NAT table entries is limited 1000 entries.
		* Limit the memory size required by user to prevent kernel memory starvation
		*/
		#define IPA_TABLE_MAX_ENTRIES 1000
		#define MAX_ALLOC_NAT_SIZE (IPA_TABLE_MAX_ENTRIES * NAT_TABLE_ENTRY_SIZE_BYTE)

		static int ipa_nat_vma_fault_remap(
		struct vm_area_struct vma, struct vm_fault vmf)
		{
		@@ -270,6 +277,13 @@ int ipa2_allocate_nat_device(struct ipa_ioc_nat_alloc_mem *mem)
		goto bail;
		}

		if (mem->size > MAX_ALLOC_NAT_SIZE) {
		IPAERR("Trying allocate more size = %zu, Max allowed = %d\n",
		mem->size, MAX_ALLOC_NAT_SIZE);
		result = -EPERM;
		goto bail;
		}

		if (mem->size <= 0 \|\|
		nat_ctx->is_dev_init == true) {
		IPAERR_RL("Invalid Parameters or device is already init\n");