]> Pileus Git - ~andy/linux/commit
ion: fix crash when alloc len is -1
authorColin Cross <ccross@android.com>
Fri, 13 Dec 2013 22:25:00 +0000 (14:25 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 14 Dec 2013 16:57:18 +0000 (08:57 -0800)
commita14baf71b91845a7f68438d48f462cb754699ae2
tree276daf4beb92235972d87bc5da5cc131b7b47b16
parent83271f6262c91a49df325c52bec8f00f4de294ca
ion: fix crash when alloc len is -1

If userspace passes a length between -4095 and -1 to allocate it
will pass the len != 0 check, but when len is page aligned it will
be 0.  Check len after page aligning.

Drop the warning as well, userspace shouldn't be able to trigger
a warning in the kernel.

Signed-off-by: Colin Cross <ccross@android.com>
Signed-off-by: John Stultz <john.stultz@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/android/ion/ion.c