msm: camera2: cpp: Fix iommu_attach/detach compat_ioctl issue
When the Camera application exercises the V4L2 ioctl operations, CPP driver would attempt to the copy user space buffer contents into the internal kernel buffer. If an invalid length of the user space buffer is passed onto the driver, it could trigger buffer overflow condition. Thus, fix this by copying user space buffer contents into kernel space buffer of the driver for further processing, only after checking for proper length of user space buffer. CRs-fixed: 2025367 Change-Id: I85cf4a961884c7bb0d036299b886044aef7baf7c Signed-off-by:Ravi kumar Koyyana <rkoyyana@codeaurora.org> Signed-off-by:
VijayaKumar T M <vtmuni@codeaurora.org>
Loading
Please register or sign in to comment