Merge "msm: camera: sync: Prevent OOB access of sync name" into camera-kernel.lnx.4.0 (322225df) · Commits · e / devices / android_kernel_fairphone_FP5

drivers/cam_sync/cam_sync.c

+2 −1

Original line number	Diff line number	Diff line
		// SPDX-License-Identifier: GPL-2.0-only
		/*
		* Copyright (c) 2017-2020, The Linux Foundation. All rights reserved.
		* Copyright (c) 2017-2021, The Linux Foundation. All rights reserved.
		*/

		#include <linux/init.h>
		@@ -477,6 +477,7 @@ static int cam_sync_handle_create(struct cam_private_ioctl_arg *k_ioctl)
		u64_to_user_ptr(k_ioctl->ioctl_ptr),
		k_ioctl->size))
		return -EFAULT;
		sync_create.name[SYNC_DEBUG_NAME_LEN] = '\0';

		result = cam_sync_create(&sync_create.sync_obj,
		sync_create.name);