Merge "usb: f_serial: Check for SMD data length in GSER_IOCTL" (18254964) · Commits · e / devices / android_kernel_xiaomi_markw

drivers/usb/gadget/function/f_serial.c

+7 −0

Original line number	Diff line number	Diff line
		@@ -1395,6 +1395,13 @@ static long gser_ioctl(struct file *fp, unsigned cmd, unsigned long arg)
		smd_port_num =
		gserial_ports[gser->port_num].client_port_num;

		if (smd_write_arg.size > GSERIAL_BUF_LEN) {
		pr_err("%s: Invalid size:%u, max: %u", __func__,
		smd_write_arg.size, GSERIAL_BUF_LEN);
		ret = -EINVAL;
		break;
		}

		pr_debug("%s: Copying %d bytes from user buffer to local\n",
		__func__, smd_write_arg.size);