msm: qdsp6v2: Check size of payload before access



Check size of payload array before access in qdsp_cvp_callback.

Change-Id: Ic5ea6686a1a09df75ddd5e6fdcdfbd74efff83d8
Signed-off-by: Vatsal Bucha <vbucha@codeaurora.org>

parent 363d4a45

sound/soc/msm/qdsp6v2/q6voice.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -6952,7 +6952,7 @@ static int32_t qdsp_cvp_callback(struct apr_client_data data, void priv)
		}

		if (data->opcode == APR_BASIC_RSP_RESULT) {
		if (data->payload_size) {
		if (data->payload_size >= (2 * sizeof(uint32_t))) {
		ptr = data->payload;

		pr_debug("%x %x\n", ptr[0], ptr[1]);