Loading drivers/platform/msm/qmp_core/qmp_sphinx_logk.c +3 −2 Original line number Diff line number Diff line Loading @@ -498,7 +498,8 @@ static long qmp_sphinx_logk_set_mapping(unsigned long arg) (__u32 __user *)arg, sizeof(__u32))) return -EFAULT; if (0 == num_elements) if ((0 == num_elements) || (num_elements > (UINT_MAX / sizeof(struct qmp_sphinx_source_mask)))) return -EFAULT; if (NULL != pmask) { Loading Loading
drivers/platform/msm/qmp_core/qmp_sphinx_logk.c +3 −2 Original line number Diff line number Diff line Loading @@ -498,7 +498,8 @@ static long qmp_sphinx_logk_set_mapping(unsigned long arg) (__u32 __user *)arg, sizeof(__u32))) return -EFAULT; if (0 == num_elements) if ((0 == num_elements) || (num_elements > (UINT_MAX / sizeof(struct qmp_sphinx_source_mask)))) return -EFAULT; if (NULL != pmask) { Loading