From 593398e7861d985b8c500ee429bdd11bcd263781 Mon Sep 17 00:00:00 2001 From: Jeya R Date: Mon, 28 Dec 2020 14:05:16 +0530 Subject: [PATCH] msm: adsprpc: Copy correct size for async job Copy correct size in invoke2 for async job to avoid stack out-of-bounds issue. Change-Id: Ia4ba5acf372ef46ab89b860c7d9ce47f49a9672e Acked-by: Deepika Singh Signed-off-by: Jeya R --- drivers/char/adsprpc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/char/adsprpc.c b/drivers/char/adsprpc.c index e2c16f6b5fa5..f07840572ae9 100644 --- a/drivers/char/adsprpc.c +++ b/drivers/char/adsprpc.c @@ -3298,7 +3298,7 @@ static int fastrpc_internal_invoke2(struct fastrpc_file *fl, if (err) goto bail; memcpy(&p.inv, &p.inv3, sizeof(struct fastrpc_ioctl_invoke_crc)); - memcpy(&p.inv.job, &p.inv3.job, sizeof(struct fastrpc_async_job)); + memcpy(&p.inv.job, &p.inv3.job, sizeof(p.inv.job)); } else { K_COPY_FROM_USER(err, 0, &p.inv, (void *)inv2->invparam, size); if (err)