On 21/06/2023 12:22, Jason-JH.Lin wrote:
CERT-C Characters and Strings (CERT STR31-C)
all_drm_priv[cnt] evaluates to an address that could be at negative
offset of an array.

In mtk_drm_get_all_drm_priv():
Guarantee that storage for strings has sufficient space for character
data and the null terminator.

So change cnt to unsigned int and check its max value.

Reviewed-by: Alexandre Mergnat <amerg...@baylibre.com>

--
Regards,
Alexandre

Reply via email to