From 2ce70405dce2d040195e3860422173695825b0fb Mon Sep 17 00:00:00 2001 From: Andy Sun Date: Thu, 7 Jun 2018 14:33:04 +0800 Subject: [PATCH] ais: sensor: fixing invalid address access issue during cci read Should use copy_to_user to pass data to userspace pointer. Change-Id: Ide5fe1b1f4c76e5c75cfa634ac6913b0908e0d72 Signed-off-by: Andy Sun --- drivers/media/platform/msm/ais/sensor/msm_sensor.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/media/platform/msm/ais/sensor/msm_sensor.c b/drivers/media/platform/msm/ais/sensor/msm_sensor.c index 0dda3a64b1a2..7434ba49fb8d 100644 --- a/drivers/media/platform/msm/ais/sensor/msm_sensor.c +++ b/drivers/media/platform/msm/ais/sensor/msm_sensor.c @@ -1242,7 +1242,12 @@ int msm_sensor_config(struct msm_sensor_ctrl_t *s_ctrl, void *argp) pr_err("%s:%d: i2c_read failed\n", __func__, __LINE__); break; } - read_config_ptr->data = local_data; + if (copy_to_user((void __user *)&read_config_ptr->data, + &local_data, sizeof(local_data))) { + pr_err("%s:%d failed\n", __func__, __LINE__); + rc = -EFAULT; + break; + } break; } case CFG_SLAVE_WRITE_I2C_ARRAY: {