msm: vidc: Fix out of bound access during memcpy
When driver queries the profile-level information from the
firmware, it allocates a buffer size of sizeof(struct hal_profile_level)
and fills the firmware response in this structure. In the client
response handler, there is a memcpy of this buffer of
sizeof(union hal_get_property) to the client's buffer. This change
prevents the out of bound access.
Change-Id: Ibff9e591e9a06dbf40e912c48ccb1713f30c9022
Signed-off-by:
Arun Menon <avmenon@codeaurora.org>
Loading
Please register or sign in to comment