Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3c259b5e authored by Aditya Bavanari's avatar Aditya Bavanari
Browse files

dsp: Add size check for afe set and get functions 



In afe_get_cal_sp_th_vi_param and afe_set_cal_sp_th_vi_cfg
functions, data size check is not present which might lead to
out of bounds access. Add size checks to fix the same.

Change-Id: I99eca6065e6f5a050527f1bfce2bfcba28123b53
Signed-off-by: default avatarAditya Bavanari <abavanar@codeaurora.org>
parent 5a2bcfb4

dsp/q6afe.c

+2 −0
Original line number Diff line number Diff line
@@ -8456,6 +8456,7 @@ static int afe_set_cal_sp_th_vi_cfg(int32_t cal_type, size_t data_size, 
	uint32_t mode;



	if (cal_data == NULL ||

	    data_size != sizeof(*cal_data) ||

	    this_afe.cal_data[AFE_FB_SPKR_PROT_TH_VI_CAL] == NULL)

		goto done;
@@ -8599,6 +8600,7 @@ static int afe_get_cal_sp_th_vi_param(int32_t cal_type, size_t data_size, 
	int ret = 0;



	if (cal_data == NULL ||

	    data_size != sizeof(*cal_data) ||

	    this_afe.cal_data[AFE_FB_SPKR_PROT_TH_VI_CAL] == NULL)

		return 0;