From ec79dcaa0083d253b4e491bd3ffc158b179d191f Mon Sep 17 00:00:00 2001 From: Manoj Prabhu B Date: Fri, 6 Mar 2020 15:56:31 +0530 Subject: [PATCH] memshare: Use QMI request structure size as decode buffer size Instead of using a set size as decode buffer size use the QMI request structure size avoiding possible out of bound case while decoding the QMI request message. Change-Id: Ibda07cb6333daa28153244ca899b1775f80c82b1 Signed-off-by: Manoj Prabhu B --- drivers/soc/qcom/memshare/msm_memshare.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/soc/qcom/memshare/msm_memshare.c b/drivers/soc/qcom/memshare/msm_memshare.c index 481691cd0026..31ef821330d7 100644 --- a/drivers/soc/qcom/memshare/msm_memshare.c +++ b/drivers/soc/qcom/memshare/msm_memshare.c @@ -673,21 +673,21 @@ static struct qmi_msg_handler qmi_memshare_handlers[] = { .type = QMI_REQUEST, .msg_id = MEM_ALLOC_GENERIC_REQ_MSG_V01, .ei = mem_alloc_generic_req_msg_data_v01_ei, - .decoded_size = MEM_ALLOC_REQ_MAX_MSG_LEN_V01, + .decoded_size = sizeof(struct mem_alloc_generic_req_msg_v01), .fn = handle_alloc_generic_req, }, { .type = QMI_REQUEST, .msg_id = MEM_FREE_GENERIC_REQ_MSG_V01, .ei = mem_free_generic_req_msg_data_v01_ei, - .decoded_size = MEM_FREE_REQ_MAX_MSG_LEN_V01, + .decoded_size = sizeof(struct mem_free_generic_req_msg_v01), .fn = handle_free_generic_req, }, { .type = QMI_REQUEST, .msg_id = MEM_QUERY_SIZE_REQ_MSG_V01, .ei = mem_query_size_req_msg_data_v01_ei, - .decoded_size = MEM_QUERY_MAX_MSG_LEN_V01, + .decoded_size = sizeof(struct mem_query_size_req_msg_v01), .fn = handle_query_size_req, }, };