Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8c0d7cff authored by Soumya Managoli's avatar Soumya Managoli
Browse files

dsp: q6voice: Add buf size check for cvs cal data 



Check for the max size of cvs command register
calibration data that can be copied else will
result in buffer overflow.

Change-Id: Id7a4c5a9795143798b68dfde779f17fb450e3848
Signed-off-by: default avatarSoumya Managoli <quic_c_smanag@quicinc.com>
parent fad96773

dsp/q6voice.c

+8 −1
Original line number Diff line number Diff line 
// SPDX-License-Identifier: GPL-2.0-only

/*

 * Copyright (c) 2012-2021, The Linux Foundation. All rights reserved.

 * Copyright (c) 2022 Qualcomm Innovation Center, Inc. All rights reserved.

 * Copyright (c) 2022-2023, Qualcomm Innovation Center, Inc. All rights reserved.

 */

#include <linux/slab.h>

#include <linux/kthread.h>
@@ -2852,6 +2852,13 @@ static int voice_send_cvs_register_cal_cmd(struct voice_data *v) 
		goto unlock;

	}



	if (col_data->cal_data.size >= MAX_COL_INFO_SIZE) {

		pr_err("%s: Invalid cal data size %d!\n",

			__func__, col_data->cal_data.size);

		ret = -EINVAL;

		goto unlock;

	}



	memcpy(&cvs_reg_cal_cmd.cvs_cal_data.column_info[0],

	       (void *) &((struct audio_cal_info_voc_col *)

	       col_data->cal_info)->data,