lisa/android_kernel_xiaomi_sm8350
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

dsp: Fix issues due to accessing array out of bounds

Browse Source 
Add check for ASM_ACTIVE_STREAMS_ALLOWED
sessions to avoid accessing the array out of bounds.

Change-Id: I7b2fe2dffdb3132fded0b1e268ebd29139050823
Signed-off-by: Prasad Kumpatla <nkumpat@codeaurora.org>
This commit is contained in:
Prasad Kumpatla 2020-05-26 21:08:21 +05:30 committed by Gerrit - the friendly Code Review server
parent a387074fd0
commit 69415f2e6c
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
dsp/rtac.c
View File

@ -957,6 +957,12 @@ void rtac_set_asm_handle(u32 session_id, void *handle)
{
pr_debug("%s\n", __func__);
if (session_id >= (ASM_ACTIVE_STREAMS_ALLOWED + 1)) {
pr_err_ratelimited("%s: Invalid Session = %d\n",
__func__, session_id);
return;
}
mutex_lock(&rtac_asm_apr_mutex);
rtac_asm_apr_data[session_id].apr_handle = handle;
mutex_unlock(&rtac_asm_apr_mutex);
@ -965,6 +971,12 @@ void rtac_set_asm_handle(u32 session_id, void *handle)
bool rtac_make_asm_callback(u32 session_id, uint32_t *payload,
u32 payload_size)
{
if (session_id >= (ASM_ACTIVE_STREAMS_ALLOWED + 1)) {
pr_err_ratelimited("%s: Invalid Session = %d\n",
__func__, session_id);
return false;
}
if (atomic_read(&rtac_asm_apr_data[session_id].cmd_state) != 1)
return false;