diff options
| author | Suzanne Candanedo <suzanne.candanedo@arm.com> | 2022-10-06 14:32:55 +0100 |
|---|---|---|
| committer | Jack Diver <diverj@google.com> | 2022-10-07 11:24:40 +0000 |
| commit | c7b5fc80ec4a8d89465cb004d22c24068125ea30 (patch) | |
| tree | 2a13313bd790cd18b0ebda552522d7ef80d91c21 /mali_kbase/mali_kbase_core_linux.c | |
| parent | 48ab9bf5fc5f938816b416a121a84128fabb4d5b (diff) | |
| download | gpu-c7b5fc80ec4a8d89465cb004d22c24068125ea30.tar.gz | |
mali_kbase: MIDCET-4220 Patch for GPUSWERRATA-1423
This patch is a fix for:
- SW Errata: 2713363
- CVE: CVE-2022-36449
Fixes overrun by kbase_read.
Bug: 251397485
Provenance: https://code.ipdelivery.arm.com/c/GPU/mali-ddk/+/4609/1
Signed-off-by: Jack Diver <diverj@google.com>
Change-Id: I86d5af2b9d6a85a520987acb7c1e9a49c19f4d42
Diffstat (limited to 'mali_kbase/mali_kbase_core_linux.c')
| -rw-r--r-- | mali_kbase/mali_kbase_core_linux.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/mali_kbase/mali_kbase_core_linux.c b/mali_kbase/mali_kbase_core_linux.c index 8cf6848..bcc2602 100644 --- a/mali_kbase/mali_kbase_core_linux.c +++ b/mali_kbase/mali_kbase_core_linux.c @@ -2170,6 +2170,9 @@ static ssize_t kbase_read(struct file *filp, char __user *buf, size_t count, lof if (unlikely(!kctx)) return -EPERM; + if (count < data_size) + return -ENOBUFS; + if (atomic_read(&kctx->event_count)) read_event = true; else |