From e9c2d518bee63b4cca6c31b0d38faab4fcf9265f Mon Sep 17 00:00:00 2001 From: Bhalchandra Gajare Date: Mon, 26 Oct 2015 17:08:43 -0700 Subject: [PATCH] ASoC: msm-compr: Fix possible array out of bounds Add check to avoid possible array out of bounds in function msm_compr_send_ddp_cfg. CRs-fixed: 925138 Change-Id: If3915565bdea998404854bd73ff7dafb8a2b23b0 Signed-off-by: Bhalchandra Gajare --- include/uapi/sound/compress_params.h | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/include/uapi/sound/compress_params.h b/include/uapi/sound/compress_params.h index ecb05356d85c..d1f03d7214b3 100644 --- a/include/uapi/sound/compress_params.h +++ b/include/uapi/sound/compress_params.h @@ -53,6 +53,8 @@ #include +#define SND_DEC_DDP_MAX_PARAMS 18 + /* AUDIO CODECS SUPPORTED */ #define MAX_NUM_CODECS 32 #define MAX_NUM_CODEC_DESCRIPTORS 32 @@ -342,8 +344,8 @@ struct snd_enc_generic { struct snd_dec_ddp { __u32 params_length; - __u32 params_id[18]; - __u32 params_value[18]; + __u32 params_id[SND_DEC_DDP_MAX_PARAMS]; + __u32 params_value[SND_DEC_DDP_MAX_PARAMS]; } __attribute__((packed, aligned(4))); struct snd_dec_flac {