nv-tegra-mirror/linux-nv-oot
1
0
Fork 0
mirror of git://nv-tegra.nvidia.com/linux-nv-oot.git synced 2025-12-22 09:11:26 +03:00
Code Issues Packages Projects Releases Wiki Activity

video: tegra: nvmap: Add checks for addition overflow

Browse Source 
Add check for overflow when two unsigned integers are added or
multiplied and return error in case of overflow condition.

JIRA TMM-5993
Bug 4479044

Change-Id: I8c9f6c55d413a2f95e445e09209d392a4c90b1e0
Signed-off-by: Surbhi Singh <surbhis@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/c/linux-nv-oot/+/3312702
Reviewed-by: Sachin Nikam <snikam@nvidia.com>
GVS: buildbot_gerritrpt <buildbot_gerritrpt@nvidia.com>
Reviewed-by: Ketan Patil <ketanp@nvidia.com>
This commit is contained in:
Surbhi Singh
2025-03-03 11:34:02 +00:00
committed by Jon Hunter
parent 83df8b7e03
commit cb233ff6f5
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
drivers/video/tegra/nvmap/nvmap_alloc.c
View File

@@ -103,6 +103,7 @@ static int handle_page_alloc(struct nvmap_client *client,
struct page **pages;
gfp_t gfp = GFP_NVMAP | __GFP_ZERO;
u64 result;
size_t tot_size;
#ifdef CONFIG_ARM64_4K_PAGES
int cc_index = 0;
#ifdef NVMAP_CONFIG_PAGE_POOLS
@@ -112,7 +113,10 @@ static int handle_page_alloc(struct nvmap_client *client,
#endif
#endif /* CONFIG_ARM64_4K_PAGES */
pages = nvmap_altalloc(nr_page * sizeof(*pages));
if (check_mul_overflow(nr_page, sizeof(*pages), &tot_size))
return -EOVERFLOW;
pages = nvmap_altalloc(tot_size);
if (!pages)
return -ENOMEM;
@@ -212,7 +216,7 @@ static int handle_page_alloc(struct nvmap_client *client,
fail:
while (i--)
__free_page(pages[i]);
nvmap_altfree(pages, nr_page * sizeof(*pages));
nvmap_altfree(pages, tot_size);
wmb();
return -ENOMEM;
}