Commit 7b2b2e29 authored by Yu'an Wang's avatar Yu'an Wang Committed by Yang Yingliang
Browse files

misc/uacce: fixup out-of-bounds array write



driver inclusion
category: Bugfix
bugzilla: NA
CVE: NA

Size in uacce_alloc_dma_buffers api is from mmap size.
If size is too big, which can cause size + max_size - 1
overflow. Then ss_num is negative, uacce_sort_dma_buffers
api may cause out-of-bounds arraywrite.

Signed-off-by: default avatarYu'an Wang <wangyuan46@huawei.com>
Signed-off-by: default avatarKai Ye <yekai13@huawei.com>
Reviewed-by: default avatarZhou Wang <wangzhou1@hisilicon.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parent d2c956ae
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment