A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-08 21:22:09 -04:00
Code Issues Projects Releases Packages Wiki Activity

memshare: Use QMI request structure size as decode buffer size

Browse source 
Instead of using a set size as decode buffer size use the QMI
request structure size avoiding possible out of bound case while
decoding the QMI request message.

Change-Id: Ibda07cb6333daa28153244ca899b1775f80c82b1
Signed-off-by: Manoj Prabhu B <bmanoj@codeaurora.org>
This commit is contained in:
Manoj Prabhu B 2020-03-06 15:56:31 +05:30 • committed by Gerrit - the friendly Code Review server
commit ec79dcaa00
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
drivers/soc/qcom/memshare/msm_memshare.c
View file

@ -673,21 +673,21 @@ static struct qmi_msg_handler qmi_memshare_handlers[] = {
.type = QMI_REQUEST,
.msg_id = MEM_ALLOC_GENERIC_REQ_MSG_V01,
.ei = mem_alloc_generic_req_msg_data_v01_ei,
.decoded_size = MEM_ALLOC_REQ_MAX_MSG_LEN_V01,
.decoded_size = sizeof(struct mem_alloc_generic_req_msg_v01),
.fn = handle_alloc_generic_req,
},
{
.type = QMI_REQUEST,
.msg_id = MEM_FREE_GENERIC_REQ_MSG_V01,
.ei = mem_free_generic_req_msg_data_v01_ei,
.decoded_size = MEM_FREE_REQ_MAX_MSG_LEN_V01,
.decoded_size = sizeof(struct mem_free_generic_req_msg_v01),
.fn = handle_free_generic_req,
},
{
.type = QMI_REQUEST,
.msg_id = MEM_QUERY_SIZE_REQ_MSG_V01,
.ei = mem_query_size_req_msg_data_v01_ei,
.decoded_size = MEM_QUERY_MAX_MSG_LEN_V01,
.decoded_size = sizeof(struct mem_query_size_req_msg_v01),
.fn = handle_query_size_req,
},
};