Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2a59825f authored by Siena Richard's avatar Siena Richard Committed by Banajit Goswami
Browse files

ASoC: msm: qdsp6v2: return error when copy from userspace fails 



A copy_from_user is not always expected to succeed. Therefore, check
for an error before operating on the buffer post copy.

CRs-Fixed: 1116070
Change-Id: I21032719e6e85f280ca0cda875c84ac8dee8916b
Signed-off-by: default avatarSiena Richard <sienar@codeaurora.org>
parent 27d34ff1

sound/soc/msm/qdsp6v2/msm-pcm-voip-v2.c

+10 −5
Original line number Diff line number Diff line
@@ -815,20 +815,25 @@ static int msm_pcm_playback_copy(struct snd_pcm_substream *substream, int a, 
			if (prtd->mode == MODE_PCM) {

				ret = copy_from_user(&buf_node->frame.voc_pkt,

							buf, count);

				if (ret) {

					pr_err("%s: copy from user failed %d\n",

					       __func__, ret);

					return -EFAULT;

				}

				buf_node->frame.pktlen = count;

			} else {

				ret = copy_from_user(&buf_node->frame,

							buf, count);

				if (buf_node->frame.pktlen >= count)

					buf_node->frame.pktlen = count -

					(sizeof(buf_node->frame.frm_hdr) +

					 sizeof(buf_node->frame.pktlen));

			}

				if (ret) {

					pr_err("%s: copy from user failed %d\n",

					       __func__, ret);

					return -EFAULT;

				}

				if (buf_node->frame.pktlen >= count)

					buf_node->frame.pktlen = count -

					(sizeof(buf_node->frame.frm_hdr) +

					 sizeof(buf_node->frame.pktlen));

			}

			spin_lock_irqsave(&prtd->dsp_lock, dsp_flags);

			list_add_tail(&buf_node->list, &prtd->in_queue);

			spin_unlock_irqrestore(&prtd->dsp_lock, dsp_flags);