A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-14 00:24:41 -04:00
Code Issues Projects Releases Packages Wiki Activity

Merge "asoc: Fix invalid size pointer access in routing driver"

Browse source
This commit is contained in:
qctecmdr 2019-04-16 07:58:50 -07:00 • committed by Gerrit - the friendly Code Review server
commit ec7ab4c45b
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
asoc/msm-pcm-routing-v2.c
View file

@ -23938,6 +23938,11 @@ static uint32_t msm_routing_get_topology(size_t data_size, void *data)
uint32_t size = 0;
/* Retrieve cal_info size from cal data*/
if (data_size < sizeof(struct audio_cal_type_basic) +
sizeof(struct audio_cal_info_adm_top)) {
pr_err("%s: Invalid data size: %zd\n", __func__, data_size);
goto done;
}
size = data_size - sizeof(struct audio_cal_type_basic);
cal_info = kzalloc(size, GFP_KERNEL);