Mirrored_Repos/LookingGlass
1
0
Fork 0
mirror of https://github.com/gnif/LookingGlass.git synced 2025-04-25 08:06:30 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

[module] fix integer overflow in kvmfr_dmabuf_create

Browse Source
This commit is contained in:
four0four 2020-10-30 00:22:18 -07:00 committed by Geoffrey McRae
parent 3de2641d92
commit c0acfd1228
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
module/dkms.conf
View File

@ -1,5 +1,5 @@
PACKAGE_NAME="kvmfr" PACKAGE_NAME="kvmfr"
PACKAGE_VERSION="0.0.3" PACKAGE_VERSION="0.0.4"
BUILT_MODULE_NAME[0]="${PACKAGE_NAME}" BUILT_MODULE_NAME[0]="${PACKAGE_NAME}"
MAKE[0]="make KDIR=${kernel_source_dir}" MAKE[0]="make KDIR=${kernel_source_dir}"
CLEAN="make KDIR=${kernel_source_dir} clean" CLEAN="make KDIR=${kernel_source_dir} clean"

4
module/kvmfr.c
View File

@ -37,7 +37,7 @@ DEFINE_MUTEX(minor_lock);
DEFINE_IDR(kvmfr_idr); DEFINE_IDR(kvmfr_idr);
#define KVMFR_UIO_NAME "KVMFR" #define KVMFR_UIO_NAME "KVMFR"
#define KVMFR_UIO_VER "0.0.3" #define KVMFR_UIO_VER "0.0.4"
#define KVMFR_DEV_NAME "kvmfr" #define KVMFR_DEV_NAME "kvmfr"
#define KVMFR_MAX_DEVICES 10 #define KVMFR_MAX_DEVICES 10
@ -171,7 +171,7 @@ static long kvmfr_dmabuf_create(struct kvmfr_dev * kdev, struct file * filp, uns
return -EINVAL; return -EINVAL;
} }
if (create.offset + create.size > kdev->size) if ((create.offset + create.size > kdev->size) || (create.offset + create.size < create.offset))
return -EINVAL; return -EINVAL;
kbuf = kzalloc(sizeof(struct kvmfrbuf), GFP_KERNEL); kbuf = kzalloc(sizeof(struct kvmfrbuf), GFP_KERNEL);