Merge "dsp: q6voice: Add buf size check for cvs cal data" (3742f710) · Commits · e / devices / android_kernel_fairphone_FP5

dsp/q6voice.c

+8 −1

Original line number	Diff line number	Diff line
		// SPDX-License-Identifier: GPL-2.0-only
		/*
		* Copyright (c) 2012-2021, The Linux Foundation. All rights reserved.
		* Copyright (c) 2022 Qualcomm Innovation Center, Inc. All rights reserved.
		* Copyright (c) 2022-2023, Qualcomm Innovation Center, Inc. All rights reserved.
		*/
		#include <linux/slab.h>
		#include <linux/kthread.h>
		@@ -2852,6 +2852,13 @@ static int voice_send_cvs_register_cal_cmd(struct voice_data *v)
		goto unlock;
		}

		if (col_data->cal_data.size >= MAX_COL_INFO_SIZE) {
		pr_err("%s: Invalid cal data size %d!\n",
		__func__, col_data->cal_data.size);
		ret = -EINVAL;
		goto unlock;
		}

		memcpy(&cvs_reg_cal_cmd.cvs_cal_data.column_info[0],
		(void ) &((struct audio_cal_info_voc_col )
		col_data->cal_info)->data,