Commit 981a0047 authored Dec 11, 2013 by Dipen Parmar

msm: sps: Add integer wrap check for debugfs buffer



When converting debugfs buffer size to kilobytes value
there is a possible integer overflow and it may result
into negative value.

Fix the issue by adding integer wrap check for buffer
size just before conversion.

CRs-fixed: 564177
Change-Id: If4615561ea6a1c58e8be8c1b72f7881c068d8520
Signed-off-by: Dipen Parmar <dipenp@codeaurora.org>

parent cd45ce66

drivers/platform/msm/sps/sps.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -184,6 +184,11 @@ static ssize_t sps_set_info(struct file file, const char __user buf,
		return -EFAULT;
		}

		if (buf_size_kb > (INT_MAX/SZ_1K)) {
		pr_err("sps:debugfs: buffer size is too large\n");
		return -EFAULT;
		}

		new_buf_size = buf_size_kb * SZ_1K;

		if (debugfs_record_enabled) {