Merge "msm: mdp: Validate input arguments from user space" (d54ded8c) · Commits · e / devices / samsung / android_kernel_samsung_msm8916

drivers/video/msm/mdp.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -485,6 +485,11 @@ static int mdp_lut_hw_update(struct fb_cmap *cmap)
		c[1] = cmap->blue;
		c[2] = cmap->red;

		if (cmap->start > MDP_HIST_LUT_SIZE \|\| cmap->len > MDP_HIST_LUT_SIZE \|\|
		(cmap->start + cmap->len > MDP_HIST_LUT_SIZE)) {
		pr_err("mdp_lut_hw_update invalid arguments\n");
		return -EINVAL;
		}
		for (i = 0; i < cmap->len; i++) {
		if (copy_from_user(&r, cmap->red++, sizeof(r)) \|\|
		copy_from_user(&g, cmap->green++, sizeof(g)) \|\|