diff options
| author | kunleiz <kunleiz@codeaurora.org> | 2019-04-16 17:46:37 +0800 |
|---|---|---|
| committer | kunleiz <kunleiz@codeaurora.org> | 2019-04-17 10:31:04 +0800 |
| commit | e41fee9833aedaa4050345ee581905082c8e7356 (patch) | |
| tree | 6998db01e50ab1b934639a537f3303aad65acfd4 /include | |
| parent | f3ec53af1d65bd3bdb4a5b8e7c029ec5126bc188 (diff) | |
lsm: check payload size validity before using it as array index
Payload size validity is not checked before using it in array index.
Check payload size to avoid out-of-boundary memory.
Change-Id: Ic0b06bb331fc1753ff7543bb218ab12d6a4a3ca8
Signed-off-by: kunleiz <kunleiz@codeaurora.org>
Diffstat (limited to 'include')
| -rw-r--r-- | include/sound/q6lsm.h | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/include/sound/q6lsm.h b/include/sound/q6lsm.h index c046cd468b49..4600b0445955 100644 --- a/include/sound/q6lsm.h +++ b/include/sound/q6lsm.h @@ -1,5 +1,5 @@ /* - * Copyright (c) 2013-2017, Linux Foundation. All rights reserved. + * Copyright (c) 2013-2017, 2019 Linux Foundation. All rights reserved. * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2 and @@ -26,7 +26,7 @@ #define LSM_MAX_NUM_CHANNELS 8 typedef void (*lsm_app_cb)(uint32_t opcode, uint32_t token, - uint32_t *payload, void *priv); + uint32_t *payload, uint16_t client_size, void *priv); struct lsm_sound_model { dma_addr_t phys; |