Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 666c775f authored by Manoj Prabhu B's avatar Manoj Prabhu B
Browse files

memshare: Use QMI request structure size as decode buffer size 



Instead of using a set size as decode buffer size use the QMI
request structure size avoiding possible out of bound case while
decoding the QMI request message.

Change-Id: Ibda07cb6333daa28153244ca899b1775f80c82b1
Signed-off-by: default avatarManoj Prabhu B <bmanoj@codeaurora.org>
parent a9013b58

drivers/soc/qcom/memshare/msm_memshare.c

+3 −3
Original line number Diff line number Diff line
@@ -675,21 +675,21 @@ static struct qmi_msg_handler qmi_memshare_handlers[] = { 
		.type = QMI_REQUEST,

		.msg_id = MEM_ALLOC_GENERIC_REQ_MSG_V01,

		.ei = mem_alloc_generic_req_msg_data_v01_ei,

		.decoded_size = MEM_ALLOC_REQ_MAX_MSG_LEN_V01,

		.decoded_size = sizeof(struct mem_alloc_generic_req_msg_v01),

		.fn = handle_alloc_generic_req,

	},

	{

		.type = QMI_REQUEST,

		.msg_id = MEM_FREE_GENERIC_REQ_MSG_V01,

		.ei = mem_free_generic_req_msg_data_v01_ei,

		.decoded_size = MEM_FREE_REQ_MAX_MSG_LEN_V01,

		.decoded_size = sizeof(struct mem_free_generic_req_msg_v01),

		.fn = handle_free_generic_req,

	},

	{

		.type = QMI_REQUEST,

		.msg_id = MEM_QUERY_SIZE_REQ_MSG_V01,

		.ei = mem_query_size_req_msg_data_v01_ei,

		.decoded_size = MEM_QUERY_MAX_MSG_LEN_V01,

		.decoded_size = sizeof(struct mem_query_size_req_msg_v01),

		.fn = handle_query_size_req,

	},

};