video: tegra: host: fix integer overflows
authorTuomas Tynkkynen <ttynkkynen@nvidia.com>
Fri, 24 Aug 2012 12:14:45 +0000 (15:14 +0300)
committerSimone Willett <swillett@nvidia.com>
Tue, 28 Aug 2012 02:45:25 +0000 (19:45 -0700)
commit104cdeb7986e543cd3697769828ad8f33240a5fb
tree42a36877f9c7a651619e585c7d80b0cceac1a7f5
parenta4c597152f0b69ba1172b3d52d4e9d39ea3bbd53
video: tegra: host: fix integer overflows

job_size() calculates the size of a job structure based on a struct
passed as a ioctl parameter. This calculation was not checked for
overflow.

Bug 1038551

Change-Id: I13d087dbd5aad5fef1c5d13ceb23e50f565acf95
Signed-off-by: Tuomas Tynkkynen <ttynkkynen@nvidia.com>
Reviewed-on: http://git-master/r/127185
Reviewed-by: Automatic_Commit_Validation_User
GVS: Gerrit_Virtual_Submit
Reviewed-by: Terje Bergstrom <tbergstrom@nvidia.com>
drivers/video/tegra/host/nvhost_job.c