Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 533e2889 authored by Alan Chen's avatar Alan Chen
Browse files

cnss2: Add data length validation in cnss_wlfw_qdss_data_send_sync() 



Add a data length validation check in fw response message in
qdss_data_send_sync().

Change-Id: I197b8d52c06e35f5fcf0f8fee94429fdcf500fcb
CRs-Fixed: 3359589
Signed-off-by: default avatarAlan Chen <quic_alache@quicinc.com>
parent c3cdfb23

drivers/net/wireless/cnss2/qmi.c

+2 −1
Original line number Diff line number Diff line
@@ -930,7 +930,8 @@ int cnss_wlfw_qdss_data_send_sync(struct cnss_plat_data *plat_priv, char *file_n 
		     resp->total_size == total_size) &&

		   (resp->seg_id_valid == 1 && resp->seg_id == req->seg_id) &&

		   (resp->data_valid == 1 &&

		    resp->data_len <= QMI_WLFW_MAX_DATA_SIZE_V01)) {

		    resp->data_len <= QMI_WLFW_MAX_DATA_SIZE_V01) &&

		   resp->data_len <= remaining) {

			memcpy(p_qdss_trace_data_temp,

			       resp->data, resp->data_len);

		} else {