tree 56d9677f002b85fa6b177ea747732d38375c3449
parent 0dd3538558607668035156ddd39b9d1f74ad5569
author Mohammed Mirza Mandayappurath Manzoor <quic_mmandaya@quicinc.com> 1694213175 -0700
committer Michael Bestas <mkbestas@lineageos.org> 1702338514 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJLBAABCgA1FiEEHrBYPudH862glXQBzJUERRm+ZmkFAmV3n9IXHG1rYmVzdGFz
 QGxpbmVhZ2Vvcy5vcmcACgkQzJUERRm+ZmmRuBAAvSJ1XiSPu0GQzw1pzkUMq0X3
 s1GsZFqTEBvZn8kTQ98tjIcr1dQRNv1cF9Uy1n8h3jTLNxiankoUG/zUCXXmLAv5
 DCesTFMkfdZJHypofLLx6qC1WBIplbJX4+pPwk/3k2UMIgDoiB9ISPGIisSgYl/5
 +83Wv3K7JJiXYvy2EcJfpr4d0D2Rd0sT1kb+/dJdZaOJzTvD5e+WT+r/2CUPYHPc
 GPtTk9/aa+60YnelbqgdbLWj8Fc3t03qIZ/NTvdAMt03jcEENZr+16ca6lX0AB8v
 UHfN1BBE3A9HfvlDTJP5sdjz2bP+2yz9u9BfDW2x6d6FNtxEc0C+kPukzFYBxZdH
 +D5snTCeNhCz0S5LlGkB/qrT/hxrKTYgrBzt/cbPZyk3w8+6Jq5xn6sWK2+jK3q5
 i6MBr6g51QdNREnVcGl7E7UMIp/+3iPpAEcOdgWNZX+6TVTjLfHLmefXM7wp12Pf
 lrNov5hxRhkswBCHLwM2ba7RY7gUwu5M5eqY/7LTHL0MFTGJMCAyIC+iJoL4ShWs
 fIp3T0ZgGw/QsrUZVQ/0m3WVRSNP7JGK+s6F1Zy8XcqWtXwoOt6k0E6ZtcI33LA4
 NgQQFV9KXUdTv5xRcNSRUFy9DxKBYEIlBRgMwnSMfxnwN6xJ3yr+N06c1GiwfOdm
 9VFi1KCrCJyM3Ry8s1A=
 =YTSs
 -----END PGP SIGNATURE-----

msm: kgsl: Prevent wrap around during user address mapping

When setting svm region during the gpuobj import ioctl call for a usermem
address, there is a possibility of a very large input size causing the
region's 64-bit end address to wrap around. This can cause the region
to incorrectly be considered valid, ultimately allowing a use after free
scenario. To prevent this, detect the occurrence of a wrap and reject the
import.

Change-Id: I4a88f56c58b830d4342e47dc1d1f6290c78ab6b4
Signed-off-by: Mohammed Mirza Mandayappurath Manzoor <quic_mmandaya@quicinc.com>
Signed-off-by: Puranam V G Tejaswi <quic_pvgtejas@quicinc.com>