Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 030ab03d authored by Shravan Nevatia's avatar Shravan Nevatia
Browse files

msm: camera: eeprom: Add OOB read check for eeprom memory map 



Add check to prevent OOB read of eeprom memory map.

Change-Id: Ifeeeffdc2a50536edbde5b5d755a052ace86d596
CRs-Fixed: 3003049
Signed-off-by: default avatarShravan Nevatia <quic_snevatia@quicinc.com>
parent 62be4cc9

drivers/cam_sensor_module/cam_eeprom/cam_eeprom_core.c

+10 −0
Original line number Diff line number Diff line 
// SPDX-License-Identifier: GPL-2.0-only

/*

 * Copyright (c) 2017-2020, The Linux Foundation. All rights reserved.

 * Copyright (c) 2022 Qualcomm Innovation Center, Inc. All rights reserved.

 */



#include <linux/module.h>
@@ -991,7 +992,16 @@ static int32_t cam_eeprom_init_pkt_parser(struct cam_eeprom_ctrl_t *e_ctrl, 
					rc = -EINVAL;

					goto end;

				}



				if ((num_map + 1) >=

					(MSM_EEPROM_MAX_MEM_MAP_CNT *

					MSM_EEPROM_MEMORY_MAP_MAX_SIZE)) {

					CAM_ERR(CAM_EEPROM, "OOB error");

					rc = -EINVAL;

					goto end;

				}

				/* Configure the following map slave address */



				map[num_map + 1].saddr = i2c_info->slave_addr;

				rc = cam_eeprom_update_slaveInfo(e_ctrl,

					cmd_buf);