From 26c4a6c3cdaf2cde035a4d3d6d339a88a1610bf7 Mon Sep 17 00:00:00 2001 From: Seung-Woo Kim Date: Tue, 17 Dec 2019 12:56:03 +0900 Subject: [PATCH] misc: modem_if: fix array-bounds in memcpy usage Fix array-bounds in memcpy usage by using bit size macro in size. It is fixed as like tw3 kernel: https://git.tizen.org/cgit/profile/wearable/platform/kernel/linux-4.9-exynos9110/tree/drivers/misc/modem_v1/modem_main.c?h=tizen Change-Id: Ie764e76c6eedcb696113837408a9994df6996bec Signed-off-by: Seung-Woo Kim --- drivers/misc/modem_v1/modem_main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/misc/modem_v1/modem_main.c b/drivers/misc/modem_v1/modem_main.c index 536b2fd68cb..e294033b155 100644 --- a/drivers/misc/modem_v1/modem_main.c +++ b/drivers/misc/modem_v1/modem_main.c @@ -85,7 +85,7 @@ static struct modem_shared *create_modem_shared_data( memset(msd->storage.addr, 0, size + (MAX_MIF_SEPA_SIZE * 2)); memcpy(msd->storage.addr, MIF_SEPARATOR, strlen(MIF_SEPARATOR)); msd->storage.addr += MAX_MIF_SEPA_SIZE; - memcpy(msd->storage.addr, &size, MAX_MIF_SEPA_SIZE); + memcpy(msd->storage.addr, &size, sizeof(int)); msd->storage.addr += MAX_MIF_SEPA_SIZE; spin_lock_init(&msd->lock); -- 2.34.1