nouveau/svm: Use struct_size() helper in nouveau_pfns_map()
Make use of the struct_size() helper instead of an open-coded version, in order to avoid any potential type mistakes or integer overflows that, in the worse scenario, could lead to heap overflows. Link: https://github.com/KSPP/linux/issues/160 Signed-off-by: Gustavo A. R. Silva <gustavoars@kernel.org> Reviewed-by: Lyude Paul <lyude@redhat.com> Signed-off-by: Lyude Paul <lyude@redhat.com> Link: https://patchwork.freedesktop.org/patch/msgid/20220207233923.GA524723@embeddedor
This commit is contained in:
parent
5e78d59a1e
commit
2a3950c43e
|
@ -925,8 +925,8 @@ nouveau_pfns_map(struct nouveau_svmm *svmm, struct mm_struct *mm,
|
|||
|
||||
mutex_lock(&svmm->mutex);
|
||||
|
||||
ret = nvif_object_ioctl(&svmm->vmm->vmm.object, args, sizeof(*args) +
|
||||
npages * sizeof(args->p.phys[0]), NULL);
|
||||
ret = nvif_object_ioctl(&svmm->vmm->vmm.object, args,
|
||||
struct_size(args, p.phys, npages), NULL);
|
||||
|
||||
mutex_unlock(&svmm->mutex);
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue