Merge "msm: npu: Avoid buffer overflow when handling get_property packet" (a85aa0c7) · Commits · e / devices / android_kernel_oneplus_sm7250

drivers/media/platform/msm/npu/npu_mgr.c

+7 −0

Original line number	Original line	Diff line number	Diff line
	@@ -1845,6 +1845,13 @@ static int app_msg_proc(struct npu_host_ctx host_ctx, uint32_t msg)
	break;		break;
	}		}

			if (prop_rsp_pkt->header.size <
			sizeof(struct ipc_msg_header_pkt)) {
			NPU_ERR("Invalid rsp pkt size %d\n",
			prop_rsp_pkt->header.size);
			break;
			}

	misc_cmd->ret_status = prop_rsp_pkt->header.status;		misc_cmd->ret_status = prop_rsp_pkt->header.status;

	if (prop_rsp_pkt->num_params > 0) {		if (prop_rsp_pkt->num_params > 0) {