Commit be5884a0 authored Dec 10, 2015 by Rajesh Kemisetti

msm: kgsl: Add missing check for size against lower VA



_get_unmapped_area_topdown() subtracts the requested size
from lower entry base without really checking its value.

This leads to overflow while working at boundary conditions.

Add a condition to check entry base with the size and proceed.

Change-Id: Ic695da683b11de35c7c4b8936a35d693dc8fa452
Signed-off-by: Rajesh Kemisetti <rajeshk@codeaurora.org>

parent 7427cd00

drivers/gpu/msm/kgsl_iommu.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1661,7 +1661,7 @@ static uint64_t _get_unmapped_area_topdown(struct kgsl_pagetable *pagetable,
		* the bottom of the previous one
		*/

		if (offset < end) {
		if ((end > size) && (offset < end)) {
		uint64_t chunk = (end - size) & mask;

		if (chunk >= offset)