Merge "msm: kgsl: Validate page offset before vmf_insert_page" (52600d32) · Commits · e / devices / android_kernel_fairphone_FP5

drivers/gpu/msm/kgsl_sharedmem.c

+5 −1

Original line number	Diff line number	Diff line
		@@ -366,8 +366,12 @@ static vm_fault_t kgsl_paged_vmfault(struct kgsl_memdesc *memdesc,
		struct vm_fault *vmf)
		{
		int pgoff;
		unsigned int offset = vmf->address - vma->vm_start;

		pgoff = (vmf->address - vma->vm_start) >> PAGE_SHIFT;
		if (offset >= memdesc->size)
		return VM_FAULT_SIGBUS;

		pgoff = offset >> PAGE_SHIFT;

		return vmf_insert_page(vma, vmf->address, memdesc->pages[pgoff]);
		}