diff options
| author | Vandana Salve <vsalve@nvidia.com> | 2014-01-28 10:52:01 +0530 |
|---|---|---|
| committer | Mitch Luban <mluban@nvidia.com> | 2014-02-04 23:47:30 -0800 |
| commit | 4ba2235f7427aecddcbd4f671419ddf4d985a77f (patch) | |
| tree | 2b9e12090314be0ca9e574d28e22b21733fb7fee /drivers/video/tegra/nvmap/nvmap_ioctl.c | |
| parent | d2b23714728f77c7a7b16976013205e14dbe7b77 (diff) | |
video: tegra: nvmap: Check for invalid handle
Add check for invalid nvmap handle
bug 1434818
Change-Id: I8ad4c5f8f40416609bcc819789e5048bbabe638b
Signed-off-by: Vandana Salve <vsalve@nvidia.com>
Reviewed-on: http://git-master/r/360717
Reviewed-by: Automatic_Commit_Validation_User
Reviewed-by: Krishna Reddy <vdumpa@nvidia.com>
Diffstat (limited to 'drivers/video/tegra/nvmap/nvmap_ioctl.c')
| -rw-r--r-- | drivers/video/tegra/nvmap/nvmap_ioctl.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/drivers/video/tegra/nvmap/nvmap_ioctl.c b/drivers/video/tegra/nvmap/nvmap_ioctl.c index bcd8584a9784..b72709e35940 100644 --- a/drivers/video/tegra/nvmap/nvmap_ioctl.c +++ b/drivers/video/tegra/nvmap/nvmap_ioctl.c @@ -235,10 +235,18 @@ int nvmap_ioctl_pinop(struct file *filp, bool is_pin, void __user *arg) goto out; } refs[i] = unmarshal_user_handle(handle); + if (!refs[i]) { + err = -EINVAL; + goto out; + } } } else { refs = on_stack; on_stack[0] = unmarshal_user_handle_array_single(op.handles); + if (!on_stack[0]) { + err = -EINVAL; + goto out; + } } trace_nvmap_ioctl_pinop(filp->private_data, is_pin, op.count, refs); |