Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6963e7f0 authored by Zhen Kong's avatar Zhen Kong Committed by Gerrit - the friendly Code Review server
Browse files

qseecom: check img_len and mdt_len against ion buf len



Variable "load_img_req.img_len" and "load_img_req.mdt_len" are
from user land, so check their values against ion buf length
to avoid buffer overread on QSEE side.

Change-Id: I9e8bfe32d3b0cd5b441ad724543c56467fa5e4da
Signed-off-by: default avatarZhen Kong <zkong@codeaurora.org>
parent 454f9e7e
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment