commit 1cfc1dc496821d3c5d8d160cc10941b25b9f95a0
author paulhsia <paulhsia@chromium.org> Wed Jul 08 16:11:58 2020 +0800
committer Commit Bot <commit-bot@chromium.org> Fri Jul 10 04:06:25 2020 +0000
tree 5d6d9e19d78b75ade06ce9fc79aaaf03c05003ef
parent 44fc7045bd1724862789ccb0e26c8b04a62922ab

CRAS: Access num_channels only for valid message

Fix usage in 144bf3828e41b26c7746be463d17d6ea55dd7163

Since message from clients could be truncated, we should use inner
fields after passing MSG_LEN_VALID check.

BUG=oss-fuzz:23965
BUG=chromium:1102860
TEST=rclient_message in oss-fuzz
TEST=cras_rclient_message_fuzzer in clusterfuzz

Change-Id: I5bc1a97f224c33dd6f84ac9c234266dcbeda59ea
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/third_party/adhd/+/2286830
Tested-by: Chih-Yang Hsia <paulhsia@chromium.org>
Commit-Queue: Chih-Yang Hsia <paulhsia@chromium.org>
Reviewed-by: Cheng-Yi Chiang <cychiang@chromium.org>