]> git.baikalelectronics.ru Git - kernel.git/commit
media, bpf: Do not copy more entries than user space requested
authorSean Young <sean@mess.org>
Wed, 23 Jun 2021 21:37:54 +0000 (22:37 +0100)
committerDaniel Borkmann <daniel@iogearbox.net>
Thu, 24 Jun 2021 13:16:40 +0000 (15:16 +0200)
commit1469b077e53ca21110a0500e1f8f5d9fa6594ff9
treeab4d15274b4ed507313302b02dd7e2d29c0a9284
parent7f746eaaca9393bdfff27fe65c4ca1b96004193f
media, bpf: Do not copy more entries than user space requested

The syscall bpf(BPF_PROG_QUERY, &attr) should use the prog_cnt field to
see how many entries user space provided and return ENOSPC if there are
more programs than that. Before this patch, this is not checked and
ENOSPC is never returned.

Note that one lirc device is limited to 64 bpf programs, and user space
I'm aware of -- ir-keytable -- always gives enough space for 64 entries
already. However, we should not copy program ids than are requested.

Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/bpf/20210623213754.632-1-sean@mess.org
drivers/media/rc/bpf-lirc.c