Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c87674e0 authored by Bhalchandra Gajare's avatar Bhalchandra Gajare Committed by Banajit Goswami
Browse files

ASoC: msm-compr: Fix possible array out of bounds 



Add check to avoid possible array out of bounds in function
msm_compr_send_ddp_cfg.

CRs-fixed: 925138
Change-Id: If3915565bdea998404854bd73ff7dafb8a2b23b0
Signed-off-by: default avatarBhalchandra Gajare <gajare@codeaurora.org>
parent 998ee751

include/uapi/sound/compress_params.h

+4 −2
Original line number Diff line number Diff line
@@ -53,6 +53,8 @@ 


#include <linux/types.h>



#define SND_DEC_DDP_MAX_PARAMS 18



/* AUDIO CODECS SUPPORTED */

#define MAX_NUM_CODECS 32

#define MAX_NUM_CODEC_DESCRIPTORS 32
@@ -343,8 +345,8 @@ struct snd_enc_generic { 


struct snd_dec_ddp {

	__u32 params_length;

	__u32 params_id[18];

	__u32 params_value[18];

	__u32 params_id[SND_DEC_DDP_MAX_PARAMS];

	__u32 params_value[SND_DEC_DDP_MAX_PARAMS];

} __attribute__((packed, aligned(4)));



struct snd_dec_flac {