Skip to content
Commit a1960e53 authored by Sanjay Yadav's avatar Sanjay Yadav Committed by Abhishek Barman
Browse files

msm: kgsl: Prevent wrap around during user address mapping


When setting svm region during the gpuobj import ioctl call for a usermem
address, there is a possibility of a very large input size causing the
region's 64-bit end address to wrap around. This can cause the region
to incorrectly be considered valid, ultimately allowing a use after free
scenario. To prevent this, detect the occurrence of a wrap and reject the
import.

Change-Id: I4a88f56c58b830d4342e47dc1d1f6290c78ab6b4
Signed-off-by: default avatarMohammed Mirza Mandayappurath Manzoor <quic_mmandaya@quicinc.com>
Signed-off-by: default avatarSanjay Yadav <quic_sanjyada@quicinc.com>
(cherry picked from commit 89a22de4)
parent 3e4e6ff3
Please register or to comment