diff options
author | Ji Soo Shin <jisshin@google.com> | 2024-03-15 07:21:35 +0000 |
---|---|---|
committer | Ji Soo Shin <jisshin@google.com> | 2024-03-19 09:37:50 +0000 |
commit | 21111bc4d1729a7778682a2695556c4a9f9757af (patch) | |
tree | 27ab9a7164906c55a853f9dd0902d57aaa2225bd | |
parent | 27e97be225d855cae38cc751d57b7dab2d17c079 (diff) | |
download | samsung-android-gs-shusky-5.15-android15-dp.tar.gz |
hdcp: fix buffer overflow in stream genandroid-15-beta-2_r0.8android-15-beta-2_r0.7android-15-beta-1_r0.8android-15-beta-1_r0.7android-gs-shusky-5.15-android15-dpandroid-gs-shusky-5.15-android15-betaandroid-gs-akita-5.15-android15-beta
Bug: 323964895
Change-Id: I99f1411764fba00fdfe3d08bbdc6dfd5d30d9c8d
Signed-off-by: Ji Soo Shin <jisshin@google.com>
(cherry picked from commit 16a8149b3e0f1ef388abf2b3e38516a0a17bcdfe)
-rw-r--r-- | teeif.c | 2 | ||||
-rw-r--r-- | teeif.h | 2 |
2 files changed, 2 insertions, 2 deletions
@@ -571,7 +571,7 @@ int teei_gen_stream_manage(uint16_t stream_num, memcpy(seq_num_m, hci->genstrminfo.seq_num_m, HDCP_RP_SEQ_NUM_M_LEN); memcpy(k, hci->genstrminfo.k, HDCP_RP_K_LEN); - memcpy(streamid_type, hci->genstrminfo.streamid_type, HDCP_RP_STREAMID_TYPE_LEN); + memcpy(streamid_type, hci->genstrminfo.streamid_type, HDCP_RP_MAX_STREAMID_TYPE_LEN); /* check returned message from SWD */ @@ -215,7 +215,7 @@ typedef struct { uint8_t streamid[HDCP_RP_MAX_STREAMID_NUM]; uint8_t seq_num_m[HDCP_RP_SEQ_NUM_M_LEN]; uint8_t k[HDCP_RP_K_LEN]; - uint8_t streamid_type[HDCP_RP_STREAMID_TYPE_LEN]; + uint8_t streamid_type[HDCP_RP_MAX_STREAMID_TYPE_LEN]; } hci_genstreaminfo_t; typedef struct { |