nv-tegra-mirror/linux-nv-oot
1
0
Fork 0
mirror of git://nv-tegra.nvidia.com/linux-nv-oot.git synced 2025-12-22 09:11:26 +03:00
Code Issues Packages Projects Releases Wiki Activity

nvsciipc: add missing check routing in set db

Browse Source 
add pointer check routine for set_db CMD.

JIRA NVIPC-3520

Change-Id: Ie9768ae839d88519013dfece97192d111acacbb2
Signed-off-by: Joshua Cha <joshuac@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/c/linux-nv-oot/+/3329729
GVS: buildbot_gerritrpt <buildbot_gerritrpt@nvidia.com>
Reviewed-by: Jeungwoo Yoo <jeungwooy@nvidia.com>
Reviewed-by: svcacv <svcacv@nvidia.com>
Tested-by: mobile promotions <svcmobile_promotions@nvidia.com>
Reviewed-by: mobile promotions <svcmobile_promotions@nvidia.com>
Reviewed-by: Simon Je <sje@nvidia.com>
This commit is contained in:
Joshua Cha
2025-03-29 11:57:55 +09:00
committed by Jon Hunter
parent 27a2c762f1
commit 454c782d5c
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
drivers/misc/nvsciipc/nvsciipc.c
View File

@@ -659,7 +659,7 @@ static int nvsciipc_ioctl_set_db(struct nvsciipc *ctx, unsigned int cmd,
if (!access_ok(user_db.entry, ctx->num_eps *
sizeof(struct nvsciipc_config_entry *))) {
ERR("invalid user-space pointer: %p\n", user_db.entry);
ERR("invalid user-space DB entry ptr: %p\n", user_db.entry);
ret = -EFAULT;
goto ptr_error;
}
@@ -703,6 +703,12 @@ static int nvsciipc_ioctl_set_db(struct nvsciipc *ctx, unsigned int cmd,
goto ptr_error;
}
if (!access_ok(entry_ptr[i], sizeof(struct nvsciipc_config_entry))) {
ERR("invalid user-space CFG entry ptr: %p\n", entry_ptr[i]);
ret = -EFAULT;
goto ptr_error;
}
ret = copy_from_user(ctx->db[i], (void __user *)entry_ptr[i],
sizeof(struct nvsciipc_config_entry));
if (ret < 0) {