commit 86e5f385e9d8d83c040c7104df0fc7046c713323
author Jack Diver <diverj@google.com> Tue Mar 15 13:01:19 2022 +0000
committer Jack Diver <diverj@google.com> Mon Mar 28 17:28:18 2022 +0000
tree 003a9d5d49e546ed37ad5412bd7bcde121f83e7f
parent 011b34254650a548be2833f0b7a56161bd1bf7e0

mali_kbase: Fix multiplication overflow in kbase_mem_alias

Bug: 215001024
Bug: 224740931
Signed-off-by: Jack Diver <diverj@google.com>
Change-Id: I6973188e97729e43999654c053a3105c4affce00
(cherry picked from commit 10c10e54cd4ca807195f96a9876c5316df51630e)

mali_kbase/mali_kbase_mem_linux.c

diff --git a/mali_kbase/mali_kbase_mem_linux.c b/mali_kbase/mali_kbase_mem_linux.c
index 8b00726..b174c4d 100644
--- a/mali_kbase/mali_kbase_mem_linux.c
+++ b/mali_kbase/mali_kbase_mem_linux.c
@@ -1741,7 +1741,7 @@
 	if (!nents)
 		goto bad_nents;
 
-	if ((nents * stride) > (U64_MAX / PAGE_SIZE))
+	if (nents > (U64_MAX / PAGE_SIZE) / stride)
 		/* 64-bit address range is the max */
 		goto bad_size;