Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8e691453 authored by Vignesh Kulothungan's avatar Vignesh Kulothungan Committed by Gerrit - the friendly Code Review server
Browse files

msm: Array bounds check for buffer index 



Check the ASM buffer index boundary before using it
to access the buffer to avoid out of array bounds error.

CRs-Fixed: 2145996
Change-Id: I97ad482dec0803debd01f19a9aeb531090fc1644
Signed-off-by: default avatarvigneshk <vigneshk@codeaurora.org>
parent aaf4841e

sound/soc/msm/qdsp6v2/msm-pcm-q6-v2.c

+5 −0
Original line number Diff line number Diff line
@@ -183,6 +183,11 @@ static void event_handler(uint32_t opcode, 
	case ASM_DATA_EVENT_READ_DONE_V2: {

		pr_debug("ASM_DATA_EVENT_READ_DONE_V2\n");

		buf_index = q6asm_get_buf_index_from_token(token);

		if (buf_index >= CAPTURE_MAX_NUM_PERIODS) {

			pr_err("%s: buffer index %u is out of range.\n",

				__func__, buf_index);

			return;

		}

		pr_debug("%s: token=0x%08x buf_index=0x%08x\n",

			 __func__, token, buf_index);

		prtd->in_frame_info[buf_index].size = payload[4];