summaryrefslogtreecommitdiff
path: root/net/switchdev
diff options
context:
space:
mode:
authorLing Xu <quic_lxu5@quicinc.com>2025-09-12 16:12:34 +0300
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2025-10-15 13:00:23 +0300
commit6e0928a8988e873da9946e17f8065ad77c720186 (patch)
tree477efeb49e084a5f325d31ab7a95af4427f37a04 /net/switchdev
parent35216e41b42fd9ce117a1e7b019a953644c851da (diff)
downloadlinux-6e0928a8988e873da9946e17f8065ad77c720186.tar.xz
misc: fastrpc: Fix fastrpc_map_lookup operation
commit 9031626ade38b092b72638dfe0c6ffce8d8acd43 upstream. Fastrpc driver creates maps for user allocated fd buffers. Before creating a new map, the map list is checked for any already existing maps using map fd. Checking with just map fd is not sufficient as the user can pass offsetted buffer with less size when the map is created and then a larger size the next time which could result in memory issues. Check for dma_buf object also when looking up for the map. Fixes: c68cfb718c8f ("misc: fastrpc: Add support for context Invoke method") Cc: stable@kernel.org Co-developed-by: Ekansh Gupta <ekansh.gupta@oss.qualcomm.com> Signed-off-by: Ekansh Gupta <ekansh.gupta@oss.qualcomm.com> Signed-off-by: Ling Xu <quic_lxu5@quicinc.com> Reviewed-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Srinivas Kandagatla <srini@kernel.org> Link: https://lore.kernel.org/r/20250912131236.303102-3-srini@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'net/switchdev')
0 files changed, 0 insertions, 0 deletions