A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-25 22:23:14 -04:00
Code Issues Projects Releases Packages Wiki Activity

ASoC: wcd9360-dsp-cntl: Limit array size of val

Browse source 
Limit size of val to WCD_MISCDEV_CMD_MAX_LEN to avoid stack overflow.

CRs-Fixed: 2177167

Change-Id: Ia0f5e3c5a786d06dbb7f0523a1d1919e93081f69
Signed-off-by: Vaishnavi Kommaraju <vkommara@codeaurora.org>
This commit is contained in:
Vaishnavi Kommaraju 2018-02-23 11:55:08 +05:30
commit 0754cfc272
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
asoc/codecs/wcd9360/wcd9360-dsp-cntl.c
View file

@ -31,6 +31,7 @@
#define WCD_PROCFS_ENTRY_MAX_LEN 16
#define WCD_9360_RAMDUMP_START_ADDR 0x20100000
#define WCD_9360_RAMDUMP_SIZE ((1024 * 1024) - 128)
#define WCD_MISCDEV_CMD_MAX_LEN 2
#define WCD_CNTL_MUTEX_LOCK(codec, lock) \
{ \
@ -893,11 +894,11 @@ static ssize_t wcd_miscdev_write(struct file *filep, const char __user *ubuf,
{
struct wcd_dsp_cntl *cntl = container_of(filep->private_data,
struct wcd_dsp_cntl, miscdev);
char val[count];
char val[WCD_MISCDEV_CMD_MAX_LEN];
bool vote;
int ret = 0;
if (count == 0 || count > 2) {
if (count == 0 || count > WCD_MISCDEV_CMD_MAX_LEN) {
pr_err("%s: Invalid count = %zd\n", __func__, count);
ret = -EINVAL;
goto done;