msm: adsprpc: Copy correct size for async job



Copy correct size in invoke2 for async job to avoid
stack out-of-bounds issue.

Change-Id: Ia4ba5acf372ef46ab89b860c7d9ce47f49a9672e
Acked-by: Deepika Singh <dsi@qti.qualcomm.com>
Signed-off-by: Jeya R <jeyr@codeaurora.org>

parent 5bf38f99

drivers/char/adsprpc.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -3298,7 +3298,7 @@ static int fastrpc_internal_invoke2(struct fastrpc_file *fl,
		if (err)
		goto bail;
		memcpy(&p.inv, &p.inv3, sizeof(struct fastrpc_ioctl_invoke_crc));
		memcpy(&p.inv.job, &p.inv3.job, sizeof(struct fastrpc_async_job));
		memcpy(&p.inv.job, &p.inv3.job, sizeof(p.inv.job));
		} else {
		K_COPY_FROM_USER(err, 0, &p.inv, (void *)inv2->invparam, size);
		if (err)