samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

asoc: common: correct buffer overflow array index Out of Bounds

Browse Source 
Add range check for ch_cnt value to avoid buffer overflow.

Change-Id: Iad18ea2fa42057211dc98c9d80465687cbc62776
This commit is contained in:
Prasad Kumpatla
2022-04-20 15:45:08 +05:30
committed by Gerrit - the friendly Code Review server
parent 6642ce7a89
commit 42e49611b0
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
asoc/msm_common.c
View File

@@ -836,6 +836,10 @@ int msm_channel_map_get(struct snd_kcontrol *kcontrol,
chmap = tx_ch; chmap = tx_ch;
ch_cnt = tx_ch_cnt; ch_cnt = tx_ch_cnt;
} }
if (ch_cnt > 2) {
pr_err("%s: Incorrect channel count: %d\n", ch_cnt);
return -EINVAL;
}
len = sizeof(uint32_t) * (ch_cnt + 1); len = sizeof(uint32_t) * (ch_cnt + 1);
chmap_data = kzalloc(len, GFP_KERNEL); chmap_data = kzalloc(len, GFP_KERNEL);
if (!chmap_data) if (!chmap_data)