msm: sensor: Fix to validate the settings size in flash
The size of the settings, copied from userspace, is directly checked in msm_cci_data_queue with CCI_I2C_MAX_WRITE. This might cause out of bound access in function msm_cci_data_queue as the max size is MAX_I2C_REG_SET. Hence adding check on the size in flash driver itself. Change-Id: Iaf8b62815282386af58d1b111876cc80411385a0 CR fixed: 2062894 Signed-off-by:Rahul Sharma <sharah@codeaurora.org> Signed-off-by:
Andy Sun <bins@codeaurora.org>
Loading
Please register or sign in to comment