Prechádzať zdrojové kódy

icnss2: Add data length validation in cnss_wlfw_qdss_data_send_sync()

Add a data length validation check in fw response message in
qdss_data_send_sync().

Change-Id: I750f46549bc914698baaf4e24f1710536ca8e356
CRs-Fixed: 3366343
Alan Chen 2 rokov pred
rodič
commit
ef9321c23d
1 zmenil súbory, kde vykonal 2 pridanie a 1 odobranie
  1. 2 1
      icnss2/qmi.c

+ 2 - 1
icnss2/qmi.c

@@ -1271,7 +1271,8 @@ int icnss_wlfw_qdss_data_send_sync(struct icnss_priv *priv, char *file_name,
 		     resp->total_size == total_size) &&
 		    (resp->seg_id_valid == 1 && resp->seg_id == req->seg_id) &&
 		    (resp->data_valid == 1 &&
-		     resp->data_len <= QMI_WLFW_MAX_DATA_SIZE_V01)) {
+		     resp->data_len <= QMI_WLFW_MAX_DATA_SIZE_V01) &&
+		    resp->data_len <= remaining) {
 			memcpy(p_qdss_trace_data_temp,
 			       resp->data, resp->data_len);
 		} else {