diff options
| author | Sree Sesha Aravind Vadrevu <svadrevu@codeaurora.org> | 2013-05-03 15:16:45 -0700 |
|---|---|---|
| committer | David Keitel <dkeitel@codeaurora.org> | 2016-03-23 20:16:57 -0700 |
| commit | 4500a5bec2018c8473cb79823b3f34423e9eb7b5 (patch) | |
| tree | 292251409b06f0f50744fc5256728f88ce1a85af /drivers/video/fbdev | |
| parent | 706d1ee157b29d99fd05989e2ff70bb46807aac5 (diff) | |
msm: mdss: Validate input in ioctl handler
Inputs to the ioctl handler need to be validated and sanitized
to avoid null pointer dereferences
CRs-fixed: 482603
Change-Id: Id652da6ec943b660842141e66e228e14219a599d
Signed-off-by: Sree Sesha Aravind Vadrevu <svadrevu@codeaurora.org>
Diffstat (limited to 'drivers/video/fbdev')
| -rw-r--r-- | drivers/video/fbdev/msm/mdss_fb.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/drivers/video/fbdev/msm/mdss_fb.c b/drivers/video/fbdev/msm/mdss_fb.c index 08937c4cf259..7032136be456 100644 --- a/drivers/video/fbdev/msm/mdss_fb.c +++ b/drivers/video/fbdev/msm/mdss_fb.c @@ -1599,12 +1599,15 @@ static int mdss_fb_display_commit(struct fb_info *info, static int mdss_fb_ioctl(struct fb_info *info, unsigned int cmd, unsigned long arg) { - struct msm_fb_data_type *mfd = (struct msm_fb_data_type *)info->par; + struct msm_fb_data_type *mfd; void __user *argp = (void __user *)arg; struct mdp_page_protection fb_page_protection; int ret = -ENOSYS; struct mdp_buf_sync buf_sync; + if (!info || !info->par) + return -EINVAL; + mfd = (struct msm_fb_data_type *)info->par; mdss_fb_power_setting_idle(mfd); mdss_fb_pan_idle(mfd); |