qseecom: check img_len and mdt_len against ion buf len
Variable "load_img_req.img_len" and "load_img_req.mdt_len" are
from user land, so check their values against ion buf length
to avoid buffer overread on QSEE side.
Change-Id: I9e8bfe32d3b0cd5b441ad724543c56467fa5e4da
Signed-off-by:
Zhen Kong <zkong@codeaurora.org>
Loading
Please register or sign in to comment