Merge "net: qrtr: fifo: Add bounds check on tx path" (ca4e701e) · Commits · e / devices / android_kernel_fairphone_FP4

net/qrtr/fifo.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -120,6 +120,9 @@ static size_t fifo_tx_avail(struct fifo_pipe *pipe)
		else
		avail = tail - head;

		if (WARN_ON_ONCE(avail > pipe->length))
		avail = 0;

		return avail;
		}

		@@ -130,6 +133,8 @@ static void fifo_tx_write(struct fifo_pipe *pipe,
		u32 head;

		head = le32_to_cpu(*pipe->head);
		if (WARN_ON_ONCE(head > pipe->length))
		return;

		len = min_t(size_t, count, pipe->length - head);
		if (len)