Merge "dsp: afe: Add check for sidetone iir config copy size" (1ec47d24) · Commits · e / devices / android_kernel_fairphone_FP5

dsp/q6afe.c

+9 −1

Original line number	Diff line number	Diff line
		// SPDX-License-Identifier: GPL-2.0-only
		/* Copyright (c) 2012-2021, The Linux Foundation. All rights reserved.
		* Copyright (c) 2022, Qualcomm Innovation Center, Inc. All rights reserved.
		* Copyright (c) 2022-2023, Qualcomm Innovation Center, Inc. All rights reserved.
		*/
		#include <linux/slab.h>
		#include <linux/debugfs.h>
		@@ -8652,6 +8652,14 @@ static int afe_sidetone_iir(u16 tx_port_id)
		pr_debug("%s: adding 2 to size:%d\n", __func__, size);
		size = size + 2;
		}

		if (size > MAX_SIDETONE_IIR_DATA_SIZE) {
		pr_err("%s: iir_config size is out of bounds:%d\n", __func__, size);
		mutex_unlock(&this_afe.cal_data[cal_index]->lock);
		ret = -EINVAL;
		goto done;
		}

		memcpy(&filter_data.iir_config, &st_iir_cal_info->iir_config, size);
		mutex_unlock(&this_afe.cal_data[cal_index]->lock);