Commit e8ffc831 authored by Federico Vaga's avatar Federico Vaga

sw:drv: validate SMEM address on ioctl

Signed-off-by: Federico Vaga's avatarFederico Vaga <federico.vaga@cern.ch>
parent 1d721161
......@@ -225,6 +225,8 @@ static long trtl_ioctl_io(struct trtl_dev *trtl, void __user *uarg)
err = copy_from_user(&io, uarg, sizeof(struct trtl_smem_io));
if (err)
return err;
if (io.addr >= trtl->cfgrom.smem_size * 4)
return -EINVAL;
if (io.is_input) {
/* read */
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment