nv-tegra-mirror/linux-nv-oot
1
0
Fork 0
mirror of git://nv-tegra.nvidia.com/linux-nv-oot.git synced 2025-12-25 02:32:08 +03:00
Code Issues Packages Projects Releases Wiki Activity

kernel: nvidia-oot: Fix Static issues S2/5

Browse Source 
Jira CAMERASW-31832

Change-Id: I4060480865bf3895fae22127bb3e0c915af8af9f
Signed-off-by: Yuyuan Chen <yuyuanc@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/c/linux-nv-oot/+/3297678
Reviewed-by: Sumeet Gupta <sumeetg@nvidia.com>
Tested-by: Patrick Young <payoung@nvidia.com>
GVS: buildbot_gerritrpt <buildbot_gerritrpt@nvidia.com>
Reviewed-by: Ryan Li <ryanli@nvidia.com>
Reviewed-by: Semi Malinen <smalinen@nvidia.com>
Reviewed-by: Vincent Chung <vincentc@nvidia.com>
This commit is contained in:
Yuyuan Chen
2025-02-12 08:30:06 +00:00
committed by Jon Hunter
parent 5ee83509d5
commit 3b31f76f27
6 changed files with 45 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
drivers/platform/tegra/rtcpu/tegra-rtcpu-trace.c
View File

@@ -257,7 +257,7 @@ static void rtcpu_trace_invalidate_entries(struct tegra_rtcpu_trace *tracer,
u64 add_value = 0;
u32 mul_value_u32 = 0;
u32 sub_value = 0;
u64 mul_value_u64 = old_next * entry_size;
u64 mul_value_u64 = (u64)old_next * (u64)entry_size;
if (unlikely(check_add_overflow(dma_handle, mul_value_u64, &add_value))) {
dev_err(tracer->dev,
@@ -1523,6 +1523,7 @@ rtcpu_raw_trace_read(struct file *file, char __user *user_buffer, size_t buffer_
u32 num_events_requested;
struct camrtc_trace_memory_header *header;
ssize_t events_copied = 0;
ssize_t events_amount = 0;
bool blocking_call = !(file->f_flags & O_NONBLOCK);
@@ -1602,7 +1603,13 @@ rtcpu_raw_trace_read(struct file *file, char __user *user_buffer, size_t buffer_
fd_context->raw_trace_last_read_event_idx = last_read_event_idx;
file->private_data = fd_context;
return events_copied * sizeof(struct camrtc_event_struct);
if (check_mul_overflow(events_copied,
(ssize_t)sizeof(struct camrtc_event_struct), &events_amount)) {
dev_err(tracer->dev, "Events copy failed due to an overflow\n");
return -EINVAL;
}
return events_amount;
}
static ssize_t rtcpu_raw_trace_write(