The fastrpc driver uses a fixed-sized array to store its sessions but missing and broken sanity checks could lead to memory beyond the array being corrupted. This specifically happens on SC8280XP platforms that use 14 sessions for the compute DSP. These are all needed for 6.0. Johan Johan Hovold (3): misc: fastrpc: fix memory corruption on probe misc: fastrpc: fix memory corruption on open misc: fastrpc: increase maximum session count drivers/misc/fastrpc.c | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) -- 2.35.1
