Check size of payload array before access in qdsp_cvp_callback. Change-Id: Ic5ea6686a1a09df75ddd5e6fdcdfbd74efff83d8 Signed-off-by: Tanya Dixit <[email protected]>
@@ -7908,7 +7908,7 @@ static int32_t qdsp_cvp_callback(struct apr_client_data *data, void *priv)
}
if (data->opcode == APR_BASIC_RSP_RESULT) {
- if (data->payload_size) {
+ if (data->payload_size >= (2 * sizeof(uint32_t))) {
ptr = data->payload;
pr_debug("%x %x\n", ptr[0], ptr[1]);