remoteproc: Harden rproc_handle_vdev() against integer overflow
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 15 Sep 2022 14:11:44 +0000 (17:11 +0300)
committerMathieu Poirier <mathieu.poirier@linaro.org>
Mon, 19 Sep 2022 21:32:27 +0000 (15:32 -0600)
commit7d7f8fe4e399519cc9ac68a475fec6d3a996341b
tree8ee0dc8a957bd0234048d8eb8bf047d0c5027c4f
parentfa25b944174a6a25a14a2bb1c52cf74d5ad95140
remoteproc: Harden rproc_handle_vdev() against integer overflow

The struct_size() macro protects against integer overflows but adding
"+ rsc->config_len" introduces the risk of integer overflows again.
Use size_add() to be safe.

Fixes: c87846571587 ("remoteproc: use struct_size() helper")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Reviewed-by: Mukesh Ojha <quic_mojha@quicinc.com>
Link: https://lore.kernel.org/r/YyMyoPoGOJUcEpZT@kili
Signed-off-by: Mathieu Poirier <mathieu.poirier@linaro.org>
drivers/remoteproc/remoteproc_core.c