Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 014fa8de authored by raghavendra ambadas's avatar raghavendra ambadas Committed by Gerrit - the friendly Code Review server
Browse files

msm: mdp: Validate input arguments from user space 



Fully verify the input arguments from user client are safe
to use.

Change-Id: Ie14332443b187951009c63ebfb78456dcd9ba60f
Signed-off-by: default avatarRaghavendra Ambadas <rambad@codeaurora.org>
parent 6fa3bc32

drivers/video/msm/mdp.c

+5 −0
Original line number Diff line number Diff line
@@ -485,6 +485,11 @@ static int mdp_lut_hw_update(struct fb_cmap *cmap) 
	c[1] = cmap->blue;

	c[2] = cmap->red;



	if (cmap->start > MDP_HIST_LUT_SIZE || cmap->len > MDP_HIST_LUT_SIZE ||

			(cmap->start + cmap->len > MDP_HIST_LUT_SIZE)) {

		pr_err("mdp_lut_hw_update invalid arguments\n");

		return -EINVAL;

	}

	for (i = 0; i < cmap->len; i++) {

		if (copy_from_user(&r, cmap->red++, sizeof(r)) ||

		    copy_from_user(&g, cmap->green++, sizeof(g)) ||