Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6a326ce1 authored by qctecmdr's avatar qctecmdr Committed by Gerrit - the friendly Code Review server
Browse files

Merge "msm: adsprpc: Check size with length passed by client"

parents bf2d916a ad1583f3

drivers/char/adsprpc.c

+4 −0
Original line number Diff line number Diff line
@@ -1248,6 +1248,10 @@ static int fastrpc_mmap_create(struct fastrpc_file *fl, int fd, 
		}

		trace_fastrpc_dma_map(fl->cid, fd, map->phys, map->size,

			len, mflags, map->attach->dma_map_attrs);

		if (map->size < len) {

			err = -EFAULT;

			goto bail;

		}



		vmid = fl->apps->channel[fl->cid].vmid;

		if (vmid) {