5d749d0bbe
Prevent memory scribble by checking that ioctl buffer size parameters are sane. Without this check, on 32 bits system, if .insize = 0xffffffff - 20 and .outsize the amount to scribble, we would overflow, allocate a small amounts and be able to write outside of the malloc'ed area. Adding a hard limit allows argument checking of the ioctl. With the current EC, it is expected .insize and .outsize to be at around 512 bytes or less. Signed-off-by: Gwendal Grignou <gwendal@chromium.org> Signed-off-by: Olof Johansson <olof@lixom.net> |
||
|---|---|---|
| .. | ||
| chromeos_laptop.c | ||
| chromeos_pstore.c | ||
| cros_ec_dev.c | ||
| cros_ec_dev.h | ||
| cros_ec_lightbar.c | ||
| cros_ec_lpc.c | ||
| cros_ec_proto.c | ||
| cros_ec_sysfs.c | ||
| cros_ec_vbc.c | ||
| cros_kbd_led_backlight.c | ||
| Kconfig | ||
| Makefile | ||