Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f2049e66 authored by Komal Bajaj's avatar Komal Bajaj Committed by Gerrit - the friendly Code Review server
Browse files

soc: qcom: Add check to handle out of bound access



Adding check in msm_minidump_add_region() to handle scenarios for
out of bound access while adding region in minidump table in SMEM.

Change-Id: Ic20663dbd2fa8ae96899930a7f7ba79dc204ff5e
Signed-off-by: default avatarKomal Bajaj <kbajaj@codeaurora.org>
parent 37a11268
Loading
Loading
Loading
Loading
+14 −3
Original line number Diff line number Diff line
@@ -252,6 +252,7 @@ EXPORT_SYMBOL(msm_minidump_update_region);
int msm_minidump_add_region(const struct md_region *entry)
{
	u32 entries;
	u32 toc_init;
	struct md_region *mdr;
	unsigned long flags;

@@ -272,6 +273,18 @@ int msm_minidump_add_region(const struct md_region *entry)
		return -ENOMEM;
	}

	toc_init = 0;
	if (minidump_table.md_ss_toc &&
		(minidump_table.md_ss_toc->md_ss_enable_status ==
		MD_SS_ENABLED)) {
		toc_init = 1;
		if (minidump_table.md_ss_toc->ss_region_count >= MAX_NUM_ENTRIES) {
			spin_unlock_irqrestore(&mdt_lock, flags);
			pr_err("Maximum regions in minidump table reached.\n");
			return -ENOMEM;
		}
	}

	mdr = &minidump_table.entry[entries];
	strlcpy(mdr->name, entry->name, sizeof(mdr->name));
	mdr->virt_addr = entry->virt_addr;
@@ -281,9 +294,7 @@ int msm_minidump_add_region(const struct md_region *entry)

	minidump_table.num_regions = entries + 1;

	if (minidump_table.md_ss_toc &&
		(minidump_table.md_ss_toc->md_ss_enable_status ==
		MD_SS_ENABLED))
	if (toc_init)
		md_update_ss_toc(entry);
	else
		pendings++;