Merge "msm: vidc: ensure the validity of video buffer access" (765fe16b) · Commits · e / devices / android_kernel_fairphone_FP4

msm/vidc/hfi_common.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -3077,6 +3077,11 @@ static void print_sfr_message(struct venus_hfi_device *device)

		vsfr = (struct hfi_sfr_struct *)device->sfr.align_virtual_addr;
		if (vsfr) {
		if (vsfr->bufSize != device->sfr.mem_size) {
		d_vpr_e("Invalid SFR buf size %d actual %d\n",
		vsfr->bufSize, device->sfr.mem_size);
		return;
		}
		vsfr_size = vsfr->bufSize - sizeof(u32);
		p = memchr(vsfr->rg_data, '\0', vsfr_size);
		/* SFR isn't guaranteed to be NULL terminated */