mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-10 14:19:09 -04:00
Merge "net: neuron: channel: Check buffer boundaries"
This commit is contained in:
commit
3de3dfe933
1 changed files with 2 additions and 0 deletions
|
|
@ -180,6 +180,8 @@ static int read_config(struct neuron_mq_data_priv *priv)
|
|||
msgq->message_alignment = hdr->message_alignment;
|
||||
/* Get ring_buffer_len value. */
|
||||
msgq->ring_buffer_len = hdr->ring_buffer_len;
|
||||
if (msgq->ring_buffer_len > resource_size(&priv->buffer))
|
||||
return -ECONNRESET;
|
||||
/* Get tail_offset, making sure the value is valid. */
|
||||
offset = hdr->tail_offset;
|
||||
if (offset > resource_size(&priv->buffer))
|
||||
|
|
|
|||
Loading…
Reference in a new issue