Deepak Nibade 9902a49b0b gpu: nvgpu: fix use of untrusted scalar value ...

Kind value can be passed to API nvgpu_vm_map() from User
space (through IOCTL NVGPU_AS_IOCTL_MAP_BUFFER_EX)

But kind value is not checked for sane values
before storing it in bfr.kind_v
And then we use this kind value as array index
in gk20a_kind_is_supported() which is incorrect

Fix this by ensuring in nvgpu_vm_map() that the
kind value is well within range

Bug 200291879
Coverity id : 2567923
Coverity id : 2567924

Change-Id: Ic57395018727cbd2260c929581db256e427316c6
Signed-off-by: Deepak Nibade <dnibade@nvidia.com>
Reviewed-on: http://git-master/r/1496597
GVS: Gerrit_Virtual_Submit
Reviewed-by: svccoveritychecker <svccoveritychecker@nvidia.com>
Reviewed-by: Terje Bergstrom <tbergstrom@nvidia.com>

2017-06-06 08:13:43 -07:00

..

bus_gk20a.c

nvgpu: fix static sparse warnings

2017-05-16 02:32:35 -07:00

bus_gk20a.h

gpu: nvgpu: Replace use of bitops.h and kernel.h

2017-04-12 07:01:12 -07:00

cde_gk20a.c

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

cde_gk20a.h

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

ce2_gk20a.c

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

ce2_gk20a.h

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

channel_gk20a.c

gpu: nvgpu: Use nvgpu_cond in notifier wq

2017-06-05 13:53:13 -07:00

channel_gk20a.h

gpu: nvgpu: Use nvgpu_cond in notifier wq

2017-06-05 13:53:13 -07:00

channel_sync_gk20a.c

gpu: nvgpu: add chip specific sync point support

2017-05-26 14:07:12 -07:00

channel_sync_gk20a.h

gpu: nvgpu: expose deterministic submit support

2017-05-05 07:54:18 -07:00

clk_gk20a.h

gpu: nvgpu: remove clk_common.c

2017-05-24 04:55:53 -07:00

css_gr_gk20a.c

gpu: nvgpu: Add wrapper nvgpu/bug.h

2017-04-13 08:56:06 -07:00

css_gr_gk20a.h

gpu: nvgpu: rename mem_desc to nvgpu_mem

2017-04-06 18:14:53 -07:00

ctxsw_trace_gk20a.c

gpu: nvgpu: Use nvgpu_thread in FECS trace

2017-05-24 04:55:36 -07:00

ctxsw_trace_gk20a.h

gpu: nvgpu: Fix build failure by missing headers

2017-05-29 02:53:42 -07:00

dbg_gpu_gk20a.c

gpu: nvgpu: remove duplicate \n from log messages

2017-05-26 03:34:30 -07:00

dbg_gpu_gk20a.h

gpu: nvgpu: use nvgpu list for profiler objects

2017-04-09 23:54:31 -07:00

ecc_gk20a.h

gpu: nvgpu: Add support for engine specific counters

2017-06-04 20:34:58 -07:00

fb_gk20a.c

nvgpu: fix static sparse warnings

2017-05-16 02:32:35 -07:00

fb_gk20a.h

gpu: nvgpu: rename mem_desc to nvgpu_mem

2017-04-06 18:14:53 -07:00

fecs_trace_gk20a.c

gpu: nvgpu: Use nvgpu_thread in FECS trace

2017-05-24 04:55:36 -07:00

fecs_trace_gk20a.h

gpu: nvgpu: Add support for FECS ctxsw tracing

2016-03-23 07:48:47 -07:00

fence_gk20a.c

gpu: nvgpu: Proper timeout for NVGPU_COND_WAIT

2017-05-24 12:14:03 -07:00

fence_gk20a.h

gpu: nvgpu: Use nvgpu_cond in semaphore wq

2017-05-16 10:24:57 -07:00

fifo_gk20a.c

gpu: nvgpu: remove duplicate \n from log messages

2017-06-06 08:13:36 -07:00

fifo_gk20a.h

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

flcn_gk20a.c

gpu: nvgpu: fix error for static code analysis

2017-05-05 09:04:15 -07:00

flcn_gk20a.h

gpu: nvgpu: fix error for static code analysis

2017-05-05 09:04:15 -07:00

gk20a_gating_reglist.c

gpu: nvgpu: Add wrapper for linux/types.h

2017-04-03 14:04:10 -07:00

gk20a_gating_reglist.h

gpu: nvgpu: gm20b: Regenerate clock gating lists

2015-03-18 12:11:09 -07:00

gk20a_scale.c

gpu: nvgpu: moved & renamed "struct pmu_gk20a"

2017-06-04 23:05:18 -07:00

gk20a_scale.h

gpu: nvgpu: move freq clipping to target function

2016-11-16 21:34:54 -08:00

gk20a_sysfs.c

gpu: nvgpu: moved & renamed "struct pmu_gk20a"

2017-06-04 23:05:18 -07:00

gk20a.c

gpu: nvgpu: Begin removing variables in struct gk20a

2017-05-30 13:24:35 -07:00

gk20a.h

gpu: nvgpu: moved & renamed "struct pmu_gk20a"

2017-06-04 23:05:18 -07:00

gr_ctx_gk20a_sim.c

gpu: nvgpu: gk20a: Use new error macro

2017-04-10 19:04:19 -07:00

gr_ctx_gk20a.c

gpu: nvgpu: Begin removing variables in struct gk20a

2017-05-30 13:24:35 -07:00

gr_ctx_gk20a.h

gpu: nvgpu: Use new kmem API functions (gk20a core)

2017-03-29 11:50:21 -07:00

gr_gk20a.c

gpu: nvgpu: Use nvgpu_cond in notifier wq

2017-06-05 13:53:13 -07:00

gr_gk20a.h

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

gr_pri_gk20a.h

gpu: nvgpu: Start re-organizing the HW headers

2017-01-11 12:44:14 -08:00

hal_gk20a.c

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

hal_gk20a.h

gpu: nvgpu: Replace use of bitops.h and kernel.h

2017-04-12 07:01:12 -07:00

hal.c

gpu: nvgpu: include hal.h from hal.c

2017-05-02 03:07:20 -07:00

hal.h

gpu: nvgpu: Replace use of bitops.h and kernel.h

2017-04-12 07:01:12 -07:00

kind_gk20a.c

gpu: nvgpu: fix use of untrusted scalar value

2017-06-06 08:13:43 -07:00

kind_gk20a.h

gpu: nvgpu: fix use of untrusted scalar value

2017-06-06 08:13:43 -07:00

ltc_common.c

gpu: nvgpu: Begin removing variables in struct gk20a

2017-05-30 13:24:35 -07:00

ltc_gk20a.c

gpu: nvgpu: Begin removing variables in struct gk20a

2017-05-30 13:24:35 -07:00

ltc_gk20a.h

gpu: nvgpu: Add class numbers to characteristics

2015-03-18 12:12:06 -07:00

mc_gk20a.c

gpu: nvgpu: Split stalling interrupt handling

2017-05-26 03:34:08 -07:00

mc_gk20a.h

gpu: nvgpu: Split stalling interrupt handling

2017-05-26 03:34:08 -07:00

mm_gk20a.c

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

mm_gk20a.h

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

platform_gk20a_generic.c

gpu: nvgpu: Use device instead of platform_device

2016-04-08 09:42:41 -07:00

platform_gk20a.h

gpu: nvgpu: I2C port for INA3221 in platform data

2017-05-24 04:55:54 -07:00

platform_vgpu_tegra.c

gpu: nvgpu: Remove uses of platform->can_elpg

2017-05-17 10:24:25 -07:00

pmu_gk20a.c

gpu: nvgpu: moved & renamed "struct pmu_gk20a"

2017-06-04 23:05:18 -07:00

pmu_gk20a.h

gpu: nvgpu: moved & renamed "struct pmu_gk20a"

2017-06-04 23:05:18 -07:00

pramin_gk20a.c

gpu: nvgpu: Add wrapper nvgpu/bug.h

2017-04-13 08:56:06 -07:00

pramin_gk20a.h

gpu: nvgpu: Split out pramin code

2017-03-31 17:21:34 -07:00

priv_ring_gk20a.c

gpu: nvgpu: Begin removing variables in struct gk20a

2017-05-30 13:24:35 -07:00

priv_ring_gk20a.h

gpu: nvgpu: Introduce priv ring HAL and define ISR

2017-05-12 10:19:52 -07:00

regops_gk20a.c

gpu: nvgpu: remove duplicate \n from log messages

2017-05-26 03:34:30 -07:00

regops_gk20a.h

gpu: nvgpu: create new nvgpu ioctl header

2015-03-18 12:11:33 -07:00

sched_gk20a.c

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

sched_gk20a.h

gpu: nvgpu: move debugfs code to linux module

2017-06-02 06:53:35 -07:00

sim_gk20a.c

gpu: nvgpu: remove duplicate \n from log messages

2017-05-26 03:34:30 -07:00

sim_gk20a.h

gpu: nvgpu: Move sim support to its own file

2017-03-20 21:49:28 -07:00

sync_gk20a.c

gpu: nvgpu: Add wrapper nvgpu/kref.h

2017-04-17 17:36:20 -07:00

sync_gk20a.h

gpu: nvgpu: remove fence dependency tracking

2017-04-11 09:57:21 -07:00

therm_gk20a.c

gpu: nvgpu: Begin removing variables in struct gk20a

2017-05-30 13:24:35 -07:00

therm_gk20a.h

gpu: nvgpu: Move ELCG programming to therm

2016-10-19 20:43:50 -07:00

tsg_gk20a.c

gpu: nvgpu: remove duplicate \n from log messages

2017-05-26 03:34:30 -07:00

tsg_gk20a.h

gpu: nvgpu: add ioctls to get current timeslice

2017-05-24 04:55:36 -07:00