Kernel Tree For Xiaomi 11 Lite NE 5G
possibility of OOB access on device->response_pkt in __response_handler. for e.x if msg queue contains 1000 messages and all 1000 were read and queue is empty. So __get_q_size api will return zero and _iface_msgq_read will go in an infinite loop, even if packet_count == max_packets. Change-Id: I3c0fb095feff0ba5d4d6dab65ed9d5111f1b6f05 Signed-off-by: Govindaraj Rajagopal <grajagop@codeaurora.org> |
||
---|---|---|
config | ||
include/uapi/vidc/media | ||
msm | ||
Makefile |