commit 78e7d62af3b403a6cedbf7aeb741f6e37cc8722a
author qctecmdr <qctecmdr@localhost> Mon Sep 11 08:08:20 2023 -0700
committer Gerrit - the friendly Code Review server <code-review@localhost> Mon Sep 11 08:08:20 2023 -0700
tree 2c794dc9945e235c470fa6319e8c1e02944076cd
parent fc8c2a396149525f7551a5b1e1e35bca93c4c607
parent 39cb5945067211cf72ac760f93d999196b0b82e6

Merge "ipc: HwBinders: Fix potential out of bound access"

ipc/HwBinders/agm_ipc_service/src/agm_server_wrapper.cpp

diff --git a/ipc/HwBinders/agm_ipc_service/src/agm_server_wrapper.cpp b/ipc/HwBinders/agm_ipc_service/src/agm_server_wrapper.cpp
index 56189f7..aa640c4 100644
--- a/ipc/HwBinders/agm_ipc_service/src/agm_server_wrapper.cpp
+++ b/ipc/HwBinders/agm_ipc_service/src/agm_server_wrapper.cpp
@@ -883,6 +883,11 @@
     void * payload_local = NULL;
     int32_t ret = 0;
 
+    if (payload.size() < size) {
+        ALOGE("%s: Invalid payload.size[%d] less than size %d\n", __func__, payload.size(), size);
+        return -EINVAL;
+    }
+
     payload_local = (void*) calloc(1, size);
     if (payload_local == NULL) {
         ALOGE("%s: Cannot allocate memory for payload_local\n", __func__);