evie/android_kernel_oneplus_msm8998
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ASoC: msm-compr: Fix possible array out of bounds

Browse source 
Add check to avoid possible array out of bounds in function
msm_compr_send_ddp_cfg.

CRs-fixed: 925138
Change-Id: If3915565bdea998404854bd73ff7dafb8a2b23b0
Signed-off-by: Bhalchandra Gajare <gajare@codeaurora.org>
This commit is contained in:
Bhalchandra Gajare 2015-10-26 17:08:43 -07:00 • committed by David Keitel
parent 5579f105aa
commit e9c2d518be
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
include/uapi/sound/compress_params.h
View file

@ -53,6 +53,8 @@
#include <linux/types.h>
#define SND_DEC_DDP_MAX_PARAMS 18
/* AUDIO CODECS SUPPORTED */
#define MAX_NUM_CODECS 32
#define MAX_NUM_CODEC_DESCRIPTORS 32
@ -342,8 +344,8 @@ struct snd_enc_generic {
struct snd_dec_ddp {
__u32 params_length;
__u32 params_id[18];
__u32 params_value[18];
__u32 params_id[SND_DEC_DDP_MAX_PARAMS];
__u32 params_value[SND_DEC_DDP_MAX_PARAMS];
} __attribute__((packed, aligned(4)));
struct snd_dec_flac {