A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-25 06:03:36 -04:00
Code Issues Projects Releases Packages Wiki Activity

msm: adsprpc: use correct size while copying user data

Browse source 
Currently, an uninitialized size variable is being used to copy
data from user. Use correct size while copying user concurrency
info for enabling persistent headers.

Change-Id: Ie81305060f2f278b29def11508cdc9851677d33e
Acked-by: Thyagarajan Venkatanarayanan <venkatan@qti.qualcomm.com>
Signed-off-by: Himateja Reddy <hmreddy@codeaurora.org>
This commit is contained in:
Himateja Reddy 2020-12-18 13:04:28 -08:00
commit 93c75f2941
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
drivers/char/adsprpc.c
View file

@ -3320,7 +3320,8 @@ static int fastrpc_internal_invoke2(struct fastrpc_file *fl,
(void *)inv2->invparam, fl);
break;
case FASTRPC_INVOKE2_KERNEL_OPTIMIZATIONS:
if (inv2->size != sizeof(uint32_t)) {
size = sizeof(uint32_t);
if (inv2->size != size) {
err = -EBADE;
goto bail;
}