diff options
| author | Ravi kumar Koyyana <rkoyyana@codeaurora.org> | 2017-03-27 17:44:36 -0700 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2017-04-29 19:06:42 -0700 |
| commit | 0f4c6731385e1db4e534d0d357685bb77b9fc63e (patch) | |
| tree | 7eee9dc8171834cc78f0a833924687a65720d8eb /lib/mpi/mpi-inline.h | |
| parent | 1ccabf65ac2fe97fbd2f2ca3a06905f52c16e50c (diff) | |
msm: camera2: cpp: Fix iommu_attach/detach compat_ioctl issue
When the Camera application exercises 32-bit version of the V4L2 ioctl
operation, it results accessing user space memory illegally. This is
due to the direct access of user space buffer by Camera CPP driver.
Thus, fix this by copying user space buffer contents into kernel space
buffer of the driver for further processing. Only after checking for
proper length of user space buffer, proceed further. This will prevent
the buffer overflow and invalid memory access.
CRs-fixed: 2025367
Change-Id: I85cf4a961884c7bb0d036299b886044aef7baf7c
Signed-off-by: Ravi kumar Koyyana <rkoyyana@codeaurora.org>
Diffstat (limited to 'lib/mpi/mpi-inline.h')
0 files changed, 0 insertions, 0 deletions