msm: ADSPRPC: validate user buffers after copying from user



validate user buffers before accessing in kernel driver.

Change-Id: I7997d069d0549de03f1467c63bdb81b20fcf3d6c
Acked-by: Chenna Kesava Raju <chennak@qti.qualcomm.com>
Signed-off-by: Tharun Kumar Merugu <mtharu@codeaurora.org>

parent 05e7d36b

drivers/char/adsprpc.c

+4 −0

Original line number	Diff line number	Diff line
		@@ -2388,6 +2388,10 @@ static long fastrpc_device_ioctl(struct file *file, unsigned int ioctl_num,
		if (!size)
		size = sizeof(struct fastrpc_ioctl_init_attrs);
		VERIFY(err, 0 == copy_from_user(&p.init, param, size));
		if (err)
		goto bail;
		VERIFY(err, p.init.init.filelen >= 0 &&
		p.init.init.memlen >= 0);
		if (err)
		goto bail;
		VERIFY(err, 0 == fastrpc_init_process(fl, &p.init));