Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit fbeba09e authored by Dennis Cagle's avatar Dennis Cagle Committed by Bernhard Thoben
Browse files

BACKPORT: msm: adsprpc: Use unsigned integer for length values



As the length datatype is signed, an attacker can both overflow
the calculation or supply a negative number to trick the check
into returning an chosen chunk. This can have undesired
consequences. Always use unsigned integer types for length
values.

Change-Id: Ifde2f0d35129014b976507f7723a319c53fabddf
Acked-by: default avatarThyagarajan Venkatanarayanan <venkatan@qti.qualcomm.com>
Signed-off-by: default avatarTharun Kumar Merugu <mtharu@codeaurora.org>
Bug: 63165135
CRs-Fixed: 2139538
Signed-off-by: default avatarDennis Cagle <dcagle@codeaurora.org>
(cherry picked from commit c29e11c774b3c59660c1c599b73b7fabf1492d43)
Signed-off-by: default avatarDavid Lin <dtwlin@google.com>
(cherry picked from commit 157a921e39321002220e040ef8a07dce8e0eccbf)
parent 280a92b9
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment