Skip to content
Snippets Groups Projects
Commit 9415b7c3 authored by Dennis Cagle's avatar Dennis Cagle Committed by Nick Desaulniers
Browse files

msm: camera: cpp: Fixing Heap overflow in output buffer


Issue:
Missing bound check when writing into the output array
buffer, which can lead to out-of-bound heap write.

Fix:
Addding hardcoded constant 8 in the MSM_OUTPUT_BUF_CNT
macro and size check to the place where the array is
accessed. Returning '0' if exceeds MSM_OUTPUT_BUF_CNT.
Caller will return -EINVAL for '0'.

Bug: 34621613
Change-Id: Ic03f86e3e47ece9ca7069527e741a75ad9a0f83f
CRs-Fixed: 2004036
Signed-off-by: default avatarPratap Nirujogi <pratapn@codeaurora.org>
Signed-off-by: default avatarDennis Cagle <d-cagle@codeaurora.org>
parent a9151c69
Branches
Tags
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment