A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-08 21:22:09 -04:00
Code Issues Projects Releases Packages Wiki Activity

Merge "msm: cvp: Avoid overflowing the stack frame"

Browse source
This commit is contained in:
qctecmdr 2020-01-16 09:15:14 -08:00 • committed by Gerrit - the friendly Code Review server
commit ea08467f55
1 changed files with 14 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

22
drivers/media/platform/msm/cvp/msm_cvp_ioctl.c
View file

@ -526,34 +526,40 @@ static long cvp_ioctl(struct msm_cvp_inst *inst,
unsigned int cmd, unsigned long arg)
{
int rc;
struct cvp_kmd_arg karg;
struct cvp_kmd_arg *karg;
if (!inst) {
dprintk(CVP_ERR, "%s: invalid params\n", __func__);
return -EINVAL;
}
memset(&karg, 0, sizeof(struct cvp_kmd_arg));
karg = kzalloc(sizeof(*karg), GFP_KERNEL);
if (!karg)
return -ENOMEM;
if (convert_from_user(&karg, arg, inst)) {
if (convert_from_user(karg, arg, inst)) {
dprintk(CVP_ERR, "%s: failed to get from user cmd %x\n",
__func__, karg.type);
__func__, karg->type);
kfree(karg);
return -EFAULT;
}
rc = msm_cvp_private((void *)inst, cmd, &karg);
rc = msm_cvp_private((void *)inst, cmd, karg);
if (rc) {
dprintk(CVP_ERR, "%s: failed cmd type %x %d\n",
__func__, karg.type, rc);
__func__, karg->type, rc);
kfree(karg);
return rc;
}
if (convert_to_user(&karg, arg)) {
if (convert_to_user(karg, arg)) {
dprintk(CVP_ERR, "%s: failed to copy to user cmd %x\n",
__func__, karg.type);
__func__, karg->type);
kfree(karg);
return -EFAULT;
}
kfree(karg);
return rc;
}