diff options
| author | Soumya Managoli <quic_c_smanag@quicinc.com> | 2023-01-06 14:37:20 +0530 |
|---|---|---|
| committer | Michael Bestas <mkbestas@lineageos.org> | 2024-08-19 10:21:47 +0300 |
| commit | ac69ab9caf3ade583c64e6700bcee81e84f2db2b (patch) | |
| tree | a09cf0517c4a3b01822b186f50a43cc493a9de47 /net/lapb/lapb_timer.c | |
| parent | 4d2730a95aa9735ec9905187b7f46f52c855237c (diff) | |
BACKPORT: ASoC: msm-pcm-q6-v2: Add dsp buf check
Current logic copies user buf size of data
from the avail dsp buf at a given offset.
If this offset returned from DSP in READ_DONE event
goes out of bounds or is corrupted, then it can lead to
out of bounds DSP buffer access, resulting in memory fault.
Fix is to add check for this buf offset, if it is within
the buf size range.
Original-Change-Id: I7753cc6db394704dbb959477150141d42b836bef
Signed-off-by: Soumya Managoli <quic_c_smanag@quicinc.com>
(cherry-picked from 28658bc2a0a290fdfcab61bed67e89874e99ca47)
[ Re-picking to adapt 1ee23bd8c37d for dsp buf check ]
Change-Id: Ie028d928492e5d113285416226abbeee8e6bfc20
Signed-off-by: Han Sol Jin <hansol@hansol.ca>
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions