Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0f8fb3e5 authored by Linux Build Service Account's avatar Linux Build Service Account Committed by Gerrit - the friendly Code Review server
Browse files

Merge "qseecom: Check input buffer from IOCTL"

parents d19ec433 41afa1a9

drivers/misc/qseecom.c

+5 −0
Original line number Diff line number Diff line
@@ -1041,6 +1041,11 @@ int __qseecom_process_rpmb_svc_cmd(struct qseecom_dev_handle *data_ptr, 
		return -EINVAL;

	}



	if ((!req_ptr->cmd_req_buf) || (!req_ptr->resp_buf)) {

		pr_err("Invalid req/resp buffer, exiting\n");

		return -EINVAL;

	}



	if (((uint32_t)req_ptr->cmd_req_buf <

			data_ptr->client.user_virt_sb_base)

			|| ((uint32_t)req_ptr->cmd_req_buf >=