diff options
author | Tuomas Tynkkynen <ttynkkynen@nvidia.com> | 2012-08-13 15:43:31 +0300 |
---|---|---|
committer | Simone Willett <swillett@nvidia.com> | 2012-08-20 16:25:52 -0700 |
commit | 1c9102f23b9140a045e2be4dc80735f1268b7961 (patch) | |
tree | c69003c96d2ce69b5f359b3c2dcd8de112983ef1 /lib/iomap.c | |
parent | add7d47849cd54bd37967b72534089dd32ed9b3c (diff) |
video: tegra: nvmap: Fix overflow in nvmap_heap
do_heap_alloc locates a suitable free block from a nvmap heap given a
size and alignment. Unfortunately, if a heap block happens to be
smaller than the alignment passed to the function, an integer overflow
will occur, and a block that's too small gets accidentally returned.
Bug 1032642
Change-Id: Ic650c520409134d753e968f62f144ddeb065ccc7
Signed-off-by: Tuomas Tynkkynen <ttynkkynen@nvidia.com>
Reviewed-on: http://git-master/r/123076
Reviewed-by: Automatic_Commit_Validation_User
GVS: Gerrit_Virtual_Submit
Reviewed-by: Krishna Reddy <vdumpa@nvidia.com>
Diffstat (limited to 'lib/iomap.c')
0 files changed, 0 insertions, 0 deletions