samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Förgrening 0
Kod Ärenden Pull-förfrågningar Actions Packages Projekt Släpp Wiki Aktiviteter

msm: ipa3: fix pointer arithmetic to avoid out-of-bound

Bläddra i källkod 
When offset gets added to base of the array, it returns
offset plus the number equal to size of the whole array.
So, correct it by passing the address of offset element
in the array.

Change-Id: I8a087ca277bdc476674c7221b5fc0920e6986570
This commit is contained in:
Jagadeesh Ponduru
2023-03-30 13:09:16 +05:30
committad av Gerrit - the friendly Code Review server
förälder 10732b43aa
incheckning 757a544d71
1 ändrade filer med 2 tillägg och 2 borttagningar
Download Patch File Download Diff File Expand all files Collapse all files

4
drivers/platform/msm/ipa/ipa_v3/ipa_utils.c
Visa fil

@@ -10178,7 +10178,7 @@ void ipa3_counter_remove_hdl(int hdl)
offset = counter->hw_counter.start_id - 1; offset = counter->hw_counter.start_id - 1;
if (offset >= 0 && (offset + counter->hw_counter.num_counters) if (offset >= 0 && (offset + counter->hw_counter.num_counters)
< IPA_FLT_RT_HW_COUNTER) { < IPA_FLT_RT_HW_COUNTER) {
memset(&ipa3_ctx->flt_rt_counters.used_hw + offset, memset(&ipa3_ctx->flt_rt_counters.used_hw[offset],
0, counter->hw_counter.num_counters * sizeof(bool)); 0, counter->hw_counter.num_counters * sizeof(bool));
} else { } else {
IPAERR_RL("unexpected hdl %d\n", hdl); IPAERR_RL("unexpected hdl %d\n", hdl);
@@ -10187,7 +10187,7 @@ void ipa3_counter_remove_hdl(int hdl)
offset = counter->sw_counter.start_id - 1 - IPA_FLT_RT_HW_COUNTER; offset = counter->sw_counter.start_id - 1 - IPA_FLT_RT_HW_COUNTER;
if (offset >= 0 && (offset + counter->sw_counter.num_counters) if (offset >= 0 && (offset + counter->sw_counter.num_counters)
< IPA_FLT_RT_SW_COUNTER) { < IPA_FLT_RT_SW_COUNTER) {
memset(&ipa3_ctx->flt_rt_counters.used_sw + offset, memset(&ipa3_ctx->flt_rt_counters.used_sw[offset],
0, counter->sw_counter.num_counters * sizeof(bool)); 0, counter->sw_counter.num_counters * sizeof(bool));
} else { } else {
IPAERR_RL("unexpected hdl %d\n", hdl); IPAERR_RL("unexpected hdl %d\n", hdl);