Merge "crypto: msm: restrict value of num_fds to QCEDEV_MAX_BUFFERS"

This commit is contained in:
qctecmdr 2020-04-02 05:43:11 -07:00 • committed by Gerrit - the friendly Code Review server
commit a67feb3b1e

View file

@ -1925,6 +1925,11 @@ long qcedev_ioctl(struct file *file,
goto exit_free_qcedev_areq;
}
if (map_buf.num_fds > QCEDEV_MAX_BUFFERS) {
err = -EINVAL;
goto exit_free_qcedev_areq;
}
for (i = 0; i < map_buf.num_fds; i++) {
err = qcedev_check_and_map_buffer(handle,
map_buf.fd[i],