Merge "bus: mhi: Fix potential out-of-bound access" (89ebcc83) · Commits · e / devices / android_kernel_fairphone_FP5

drivers/bus/mhi/devices/mhi_satellite.c

+2 −1

Original line number	Diff line number	Diff line
		@@ -357,7 +357,8 @@ static struct mhi_sat_device *find_sat_dev_by_id(
		static bool mhi_sat_isvalid_header(struct sat_header *hdr, int len)
		{
		/* validate payload size */
		if (len >= sizeof(hdr) && (len != hdr->payload_size + sizeof(hdr)))
		if ((len < sizeof(*hdr)) \|\|
		(len >= sizeof(hdr) && (len != hdr->payload_size + sizeof(hdr))))
		return false;

		/* validate SAT IPC version */