Merge "ASOC: msm: Restrict loop index to avoid buffer overread" (94cfcff8) · Commits · e / devices / android_kernel_xiaomi_markw

sound/soc/msm/qdsp6v2/msm-dolby-dap-config.c

+7 −1

Original line number	Diff line number	Diff line
		/* Copyright (c) 2013-2014, 2016-2017,The Linux Foundation. All rights reserved.
		/*
		* Copyright (c) 2013-2014, 2016-2017, The Linux Foundation. All rights reserved.
		*
		* This program is free software; you can redistribute it and/or modify
		* it under the terms of the GNU General Public License version 2 and
		* only version 2 as published by the Free Software Foundation.
		@@ -816,6 +818,10 @@ int msm_dolby_dap_param_to_get_control_get(struct snd_kcontrol *kcontrol,
		__func__, copp_idx);
		return -EINVAL;
		}
		if (dolby_dap_params_get.length > 128 - DOLBY_PARAM_PAYLOAD_SIZE) {
		pr_err("%s: Incorrect parameter length", __func__);
		return -EINVAL;
		}
		params_value = kzalloc(params_length + param_payload_len, GFP_KERNEL);
		if (!params_value) {
		pr_err("%s, params memory alloc failed\n", __func__);