msm: ADSPRPC: Fix buffer overflow for session



Fix to check the session count before accessing the
session buffer.

Change-Id: Iff98b6504c331d65f46c7934e09720f4522ea225
Acked-by: Bharath Kumar <bkumar@qti.qualcomm.com>
Signed-off-by: Sathish Ambley <sathishambley@codeaurora.org>

parent d5809484

drivers/char/adsprpc.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -2051,6 +2051,9 @@ static int fastrpc_cb_legacy_probe(struct device *dev)
		&disable_htw);
		VERIFY(err, !arm_iommu_attach_device(first_sess->dev,
		first_sess->smmu.mapping));
		if (err)
		goto bail;
		VERIFY(err, (sids_size/sizeof(unsigned int)) <= NUM_SESSIONS);
		if (err)
		goto bail;
		for (i = 0; i < sids_size/sizeof(unsigned int); i++) {