diff options
| author | Mayank Rana <mrana@codeaurora.org> | 2015-09-02 16:25:31 -0700 |
|---|---|---|
| committer | David Keitel <dkeitel@codeaurora.org> | 2016-03-23 19:58:21 -0700 |
| commit | 4687a02e767fc1cc2f9275d6b7e3cb681a0d9945 (patch) | |
| tree | 3993790d0cfa1fc055963bc57a182d960a04ea29 /include/linux/devfreq.h | |
| parent | df2968af9f8c4d3f784bd7a66a1adcfe9c9f743c (diff) | |
usb: u_data_bridge: Check allowable size with gbridge_port_write()
Currently gbridge_port_write() is not checking size of user space
provided data and directly copies buffer into USB request buffer
which is having size as 2KB. If user space application writes data
bigger than 2KB, copy_from_user() tries to copy data beyond allocated
USB request buffer size which results into memory corruption. Fix
this issue by checking allowable size with gbridge_port_write() and
making sure that it doesn't copy data beyond allocated buffer size.
Change-Id: I7a34e37f5d1609792374f07b70542b80edbe6944
Signed-off-by: Mayank Rana <mrana@codeaurora.org>
Diffstat (limited to 'include/linux/devfreq.h')
0 files changed, 0 insertions, 0 deletions