Commit e8ffc831 authored by Federico Vaga's avatar Federico Vaga

sw:drv: validate SMEM address on ioctl

Signed-off-by: Federico Vaga's avatarFederico Vaga <federico.vaga@cern.ch>
parent 1d721161
...@@ -225,6 +225,8 @@ static long trtl_ioctl_io(struct trtl_dev *trtl, void __user *uarg) ...@@ -225,6 +225,8 @@ static long trtl_ioctl_io(struct trtl_dev *trtl, void __user *uarg)
err = copy_from_user(&io, uarg, sizeof(struct trtl_smem_io)); err = copy_from_user(&io, uarg, sizeof(struct trtl_smem_io));
if (err) if (err)
return err; return err;
if (io.addr >= trtl->cfgrom.smem_size * 4)
return -EINVAL;
if (io.is_input) { if (io.is_input) {
/* read */ /* read */
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment