samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

msm: eva: fix KASAN stack-out-of-bounds issue in __iface_cmdq_write_relaxed

Browse Source 
Change-Id: Id5b07cf778804ac7865f150e72331be6e94cb80d
Signed-off-by: Jingyu Su <quic_jingyus@quicinc.com>
This commit is contained in:
Jingyu Su
2023-04-18 14:42:08 -07:00
committed by Gerrit - the friendly Code Review server
parent fec60a4a00
commit 564ed96df0
1 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
msm/eva/cvp_hfi.c
View File

@@ -433,12 +433,17 @@ static int __write_queue(struct cvp_iface_q_info *qinfo, u8 *packet,
} }
cmd_pkt = (struct cvp_hfi_cmd_session_hdr *)packet; cmd_pkt = (struct cvp_hfi_cmd_session_hdr *)packet;
dprintk(CVP_CMD, "%s: "
"pkt_type %08x sess_id %08x trans_id %u ktid %llu\n", if (cmd_pkt->size >= sizeof(struct cvp_hfi_cmd_session_hdr))
__func__, cmd_pkt->packet_type, dprintk(CVP_CMD, "%s: "
cmd_pkt->session_id, "pkt_type %08x sess_id %08x trans_id %u ktid %llu\n",
cmd_pkt->client_data.transaction_id, __func__, cmd_pkt->packet_type,
cmd_pkt->client_data.kdata & (FENCE_BIT - 1)); cmd_pkt->session_id,
cmd_pkt->client_data.transaction_id,
cmd_pkt->client_data.kdata & (FENCE_BIT - 1));
else
dprintk(CVP_CMD, "%s: "
"pkt_type %08x", __func__, cmd_pkt->packet_type);
if (msm_cvp_debug & CVP_PKT) { if (msm_cvp_debug & CVP_PKT) {
dprintk(CVP_PKT, "%s: %pK\n", __func__, qinfo); dprintk(CVP_PKT, "%s: %pK\n", __func__, qinfo);