Merge "diag: Add conditional check for len in dci_process_ctrl_status()" (b60a8d24) · Commits · e / devices / android_kernel_xiaomi_markw

drivers/char/diag/diag_dci.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -831,7 +831,7 @@ static void dci_process_ctrl_status(unsigned char *buf, int len, int token)
		read_len += sizeof(struct diag_ctrl_dci_status);

		for (i = 0; i < header->count; i++) {
		if (read_len > len) {
		if (read_len > (len - 2)) {
		pr_err("diag: In %s, Invalid length len: %d\n",
		__func__, len);
		return;