Merge "qseecom: Ensure incoming "app_name" does not corrupt the kernel stack" (3ae5c8c1) · Commits · e / devices / android_kernel_sony_msm8994

drivers/misc/qseecom.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -778,6 +778,7 @@ static int qseecom_load_app(struct qseecom_dev_handle data, void __user argp)
		if (ret)
		return ret;
		req.qsee_cmd_id = QSEOS_APP_LOOKUP_COMMAND;
		load_img_req.img_name[MAX_APP_NAME_SIZE-1] = '\0';
		memcpy(req.app_name, load_img_req.img_name, MAX_APP_NAME_SIZE);

		ret = __qseecom_check_app_exists(req);
		@@ -2483,6 +2484,7 @@ static int qseecom_query_app_loaded(struct qseecom_dev_handle *data,
		}

		req.qsee_cmd_id = QSEOS_APP_LOOKUP_COMMAND;
		query_req.app_name[MAX_APP_NAME_SIZE-1] = '\0';
		memcpy(req.app_name, query_req.app_name, MAX_APP_NAME_SIZE);

		ret = __qseecom_check_app_exists(req);