diff options
| author | Aditya Bavanari <abavanar@codeaurora.org> | 2019-07-19 12:59:02 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2019-07-29 00:05:46 -0700 |
| commit | 2f606aebdb75872284fee2ce57542bcbe180d66e (patch) | |
| tree | 75932df142fc541d328d98be6ab4b2def758cefc | |
| parent | 32d3d6b1c6ea2d455cc6e345815be621cebe52f4 (diff) | |
ASoC: msm: qdsp6v2: Remove param_size from pkt_size of apr header
As param_size is included in apr header pkt_size, out of
bounds access occurs in glink. Remove the param size addition
to fix this issue.
CRs-Fixed: 2472208
Change-Id: If8b34aeacd3bc9ba67ac9276eb1a8ebf0933f9f9
Signed-off-by: Aditya Bavanari <abavanar@codeaurora.org>
| -rw-r--r-- | sound/soc/msm/qdsp6v2/q6afe.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sound/soc/msm/qdsp6v2/q6afe.c b/sound/soc/msm/qdsp6v2/q6afe.c index c8a2cc37363c..7ee774ddccf7 100644 --- a/sound/soc/msm/qdsp6v2/q6afe.c +++ b/sound/soc/msm/qdsp6v2/q6afe.c @@ -1241,7 +1241,7 @@ static int q6afe_get_params_v2(u16 port_id, int index, afe_get_param.apr_hdr.hdr_field = APR_HDR_FIELD(APR_MSG_TYPE_SEQ_CMD, APR_HDR_LEN(APR_HDR_SIZE), APR_PKT_VER); - afe_get_param.apr_hdr.pkt_size = sizeof(afe_get_param) + param_size; + afe_get_param.apr_hdr.pkt_size = sizeof(afe_get_param); afe_get_param.apr_hdr.src_port = 0; afe_get_param.apr_hdr.dest_port = 0; afe_get_param.apr_hdr.token = index; |