commit 7d46ce8343987b50b43272ba5efb9a3b495c77d7
author Vatsal Bucha <vbucha@codeaurora.org> Wed Feb 06 13:47:17 2019 +0530
committer Gerrit - the friendly Code Review server <code-review@localhost> Wed Nov 06 00:31:53 2019 -0800
tree 5b412c6d15d0486ac6317d591fe67b553a788799
parent 762f5de51277360500e4f00318bafa109b154536

dsp: q6voice: Check size of payload before access

Check size of payload array before access in qdsp_cvp_callback.

Change-Id: Ic5ea6686a1a09df75ddd5e6fdcdfbd74efff83d8
Signed-off-by: Vatsal Bucha <vbucha@codeaurora.org>

dsp/q6voice.c

diff --git a/dsp/q6voice.c b/dsp/q6voice.c
index e768278..49f77ff 100644
--- a/dsp/q6voice.c
+++ b/dsp/q6voice.c
@@ -8023,7 +8023,7 @@
 	}
 
 	if (data->opcode == APR_BASIC_RSP_RESULT) {
-		if (data->payload_size) {
+		if (data->payload_size >= (2 * sizeof(uint32_t))) {
 			ptr = data->payload;
 
 			pr_debug("%x %x\n", ptr[0], ptr[1]);