camera: tegra: Fix security vulnerability issue

Deprecate outdated UPDATE_GPIO function in camera.pcl
driver. This function is not used by any code anymore
and is a security vulnerability since it is trying to
access user mode pointer directly.

Bug 1745102

Change-Id: I4e7e5f9c186f980dcadfe52ec4284102255f19cf
Signed-off-by: Frank Chen <frankc@nvidia.com>
Reviewed-on: http://git-master/r/1115302
Reviewed-by: Automatic_Commit_Validation_User
GVS: Gerrit_Virtual_Submit
Reviewed-by: Todd Poynter <tpoynter@nvidia.com>

diff --git a/drivers/media/platform/tegra/cam_dev/virtual.c b/drivers/media/platform/tegra/cam_dev/virtual.c
index bf332f6b4afbc1e3d9ecd419ddbe675ffde5d772..46303ebe1dea2e9354b8dbe4a313013cdda7f6da 100644 (file)
--- a/drivers/media/platform/tegra/cam_dev/virtual.c
+++ b/drivers/media/platform/tegra/cam_dev/virtual.c
@@ -103,28 +103,8 @@ static int virtual_update(
                }
                case UPDATE_GPIO:
                {
-                       struct nvc_gpio *gpio;
-
-                       if (upd[idx].index >= cdev->num_gpio) {
-                               dev_err(cdev->dev,
-                                       "gpio index %d out of range.\n",
-                                       upd[idx].index);
-                               err = -ENODEV;
-                               break;
-                       }
-                       gpio = (void *)((unsigned long)upd[idx].arg);
-                       if (gpio->gpio >= ARCH_NR_GPIOS) {
-                               dev_err(cdev->dev,
-                                       "gpio index %d out of range.\n",
-                                       gpio->gpio);
-                               err = -ENODEV;
-                               break;
-                       }
-
-                       dev_dbg(cdev->dev, "UPDATE_GPIO: %d %u\n",
-                               upd[idx].index, upd[idx].arg);
-                       gpio->valid = true;
-                       cdev->gpios[upd[idx].index] = *gpio;
+                       dev_dbg(cdev->dev, "%s UPDATE_GPIO is deprecated\n",
+                               __func__);
                        break;
                }
                default: