d6d05fba0b
Adds proper sanity on virtual cdm right operation to avoid OOB register space access. After getting the mapped buffers through cam_mem_get_cpu_buf() in kernel, userspace is still able to access those buffers. So, the validation of offsets and sizes does not have any advantage if userspace can alter those parameters after we have validated them. That's why we copied the information in kernel before we validate that. CRs-Fixed: 3778045 Change-Id: I3b53549419b40a92333263e29d93220577d691e9 Signed-off-by: Yash Upadhyay <quic_yupadhya@quicinc.com> |
||
|---|---|---|
| .. | ||
| cam_cdm | ||
| cam_core | ||
| cam_cpas | ||
| cam_cre | ||
| cam_cust | ||
| cam_fd | ||
| cam_icp | ||
| cam_isp | ||
| cam_jpeg | ||
| cam_lrme | ||
| cam_ope | ||
| cam_presil | ||
| cam_req_mgr | ||
| cam_sensor_module | ||
| cam_smmu | ||
| cam_sync | ||
| cam_utils | ||
| camera_main.c | ||
| camera_main.h | ||