diff options
| author | Pratap Nirujogi <pratapn@codeaurora.org> | 2017-02-20 17:29:33 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2017-03-02 02:02:24 -0800 |
| commit | b5ac2b42fdd2fffc9d887f43491715d2f733497f (patch) | |
| tree | d6f86674e3cefd2ea05a21900abb072f9b4c3b72 /kernel/trace/trace_functions_graph.c | |
| parent | 81eef00c6735412494d82607be1f1aaa2cb3c616 (diff) | |
msm: camera: cpp: Fixing Heap overflow in output buffer
Issue:
Missing bound check when writing into the output array
buffer, which can lead to out-of-bound heap write.
Fix:
Addding hardcoded constant 8 in the MSM_OUTPUT_BUF_CNT
macro and size check to the place where the array is
accessed. Returning '0' if exceeds MSM_OUTPUT_BUF_CNT.
Caller will return -EINVAL for '0'.
Change-Id: Ic03f86e3e47ece9ca7069527e741a75ad9a0f83f
CRs-Fixed: 2004036
Signed-off-by: Pratap Nirujogi <pratapn@codeaurora.org>
Diffstat (limited to 'kernel/trace/trace_functions_graph.c')
0 files changed, 0 insertions, 0 deletions