Vincent Stehlé 33bcee93f7 staging: android: vsoc: fix copy_from_user overrun ...

[ Upstream commit 060ea4271a ]

The `np->permission' structure is smaller than the `np' structure but
sizeof(*np) worth of data is copied in there. Fix the size passed to
copy_from_user() to avoid overrun.

Fixes: 3d2ec9dcd5 ("staging: Android: Add 'vsoc' driver for cuttlefish.")
Signed-off-by: Vincent Stehlé <vincent.stehle@laposte.net>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-01-27 14:50:39 +01:00

..

ion

staging: android: ion: Bail out upon SIGKILL when allocating memory.

2019-08-16 10:12:38 +02:00

uapi

staging: android: ion: Fix license identifier comment format

2018-05-08 13:34:39 +02:00

ashmem.c

staging: android: ashmem: Avoid range_alloc() allocation with ashmem_mutex held.

2019-03-10 07:17:16 +01:00

ashmem.h

staging: android: Clean up license identifiers

2018-05-08 13:24:15 +02:00

Kconfig

staging: android: Kconfig; Remove excessive hyphens

2018-05-08 13:24:15 +02:00

Makefile

staging: Android: Add 'vsoc' driver for cuttlefish.

2018-04-23 14:51:37 +02:00

TODO

staging: Android: vsoc: Create wc kernel mapping for region shm.

2018-05-03 13:53:03 -07:00

vsoc.c

staging: android: vsoc: fix copy_from_user overrun

2020-01-27 14:50:39 +01:00