From 93c75f2941e959a2b641ef3131a1aab8b3f6543a Mon Sep 17 00:00:00 2001 From: Himateja Reddy Date: Fri, 18 Dec 2020 13:04:28 -0800 Subject: [PATCH] msm: adsprpc: use correct size while copying user data Currently, an uninitialized size variable is being used to copy data from user. Use correct size while copying user concurrency info for enabling persistent headers. Change-Id: Ie81305060f2f278b29def11508cdc9851677d33e Acked-by: Thyagarajan Venkatanarayanan Signed-off-by: Himateja Reddy --- drivers/char/adsprpc.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/char/adsprpc.c b/drivers/char/adsprpc.c index c44d4bc28c8d..e2c16f6b5fa5 100644 --- a/drivers/char/adsprpc.c +++ b/drivers/char/adsprpc.c @@ -3320,7 +3320,8 @@ static int fastrpc_internal_invoke2(struct fastrpc_file *fl, (void *)inv2->invparam, fl); break; case FASTRPC_INVOKE2_KERNEL_OPTIMIZATIONS: - if (inv2->size != sizeof(uint32_t)) { + size = sizeof(uint32_t); + if (inv2->size != size) { err = -EBADE; goto bail; }