Merge "diag: Prevent out-of-bound read while processing peripheral ctrl_pkt" (abd4fd0d) · Commits · e / devices / android_kernel_xiaomi_nabu

drivers/char/diag/diagfwd_cntl.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -985,6 +985,8 @@ void diag_cntl_process_read_data(struct diagfwd_info p_info, void buf,

		while (read_len + header_len < len) {
		ctrl_pkt = (struct diag_ctrl_pkt_header_t *)ptr;
		if ((read_len + header_len + ctrl_pkt->len) > len)
		return;
		switch (ctrl_pkt->pkt_id) {
		case DIAG_CTRL_MSG_REG:
		process_command_registration(ptr, ctrl_pkt->len,