Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c871c561 authored by Linux Build Service Account's avatar Linux Build Service Account Committed by Gerrit - the friendly Code Review server
Browse files

Merge "ion: Fix unprotected userspace access"

parents 7d13a246 5328a92f

drivers/staging/android/ion/msm/compat_msm_ion.c

+1 −1
Original line number Diff line number Diff line
@@ -58,7 +58,7 @@ static int compat_get_ion_flush_data( 
	err |= put_user(i, &data->fd);

	err |= get_user(u, &data32->vaddr);

	/* upper bits won't get set, zero them */

	data->vaddr = NULL;

	err |= put_user(NULL, &data->vaddr);

	err |= put_user(u, (compat_uptr_t *)&data->vaddr);

	err |= get_user(l, &data32->offset);

	err |= put_user(l, &data->offset);