Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit a67feb3b authored by qctecmdr's avatar qctecmdr Committed by Gerrit - the friendly Code Review server
Browse files

Merge "crypto: msm: restrict value of num_fds to QCEDEV_MAX_BUFFERS"

parents f115a8d7 c95de1ae

drivers/crypto/msm/qcedev.c

+5 −0
Original line number Diff line number Diff line
@@ -1925,6 +1925,11 @@ long qcedev_ioctl(struct file *file, 
				goto exit_free_qcedev_areq;

			}



			if (map_buf.num_fds > QCEDEV_MAX_BUFFERS) {

				err = -EINVAL;

				goto exit_free_qcedev_areq;

			}



			for (i = 0; i < map_buf.num_fds; i++) {

				err = qcedev_check_and_map_buffer(handle,

						map_buf.fd[i],