diff options
| author | Amir Samuelov <amirs@codeaurora.org> | 2016-11-26 18:44:06 +0200 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2016-12-13 22:26:38 -0800 |
| commit | 28d23d4d7999f683b27b6e0c489635265b67a4c9 (patch) | |
| tree | cd945d6c08dcabc47908e55d5ba91db4dff920ef /tools/perf/scripts/python | |
| parent | 3162449f7d245d45f007d4ea3224576ddf1bcc63 (diff) | |
spcom: check size before calling copy_to_user()
Calling copy_to_user(to, from, size) with negative value
might cause heap overflow since size is unsigned parameter
and negative value is cast to big unsigned value.
CRs-Fixed: 1092683
Change-Id: I9b4a0710aa33942de2976f7ee158a8025dd6a20e
Signed-off-by: Amir Samuelov <amirs@codeaurora.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions