diff options
| author | Linux Build Service Account <lnxbuild@quicinc.com> | 2017-08-07 04:11:08 -0700 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2017-08-07 04:11:08 -0700 |
| commit | d64a04c285334f45ea7baefaa2bfa180388e2d85 (patch) | |
| tree | 5f67f2ce1ade36f7d8f0530d6b3014c3c0a64258 | |
| parent | d843c02a78884df35eaa579aa30b7e831cdca51d (diff) | |
| parent | 79db0d152398fab0421c2f1381f13a1ecc71a547 (diff) | |
Merge "msm: ais: Bound check for num_of_stream"
| -rw-r--r-- | drivers/media/platform/msm/ais/isp/msm_isp_stats_util.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/drivers/media/platform/msm/ais/isp/msm_isp_stats_util.c b/drivers/media/platform/msm/ais/isp/msm_isp_stats_util.c index 6e89544161ee..0d08cffda25c 100644 --- a/drivers/media/platform/msm/ais/isp/msm_isp_stats_util.c +++ b/drivers/media/platform/msm/ais/isp/msm_isp_stats_util.c @@ -891,6 +891,12 @@ int msm_isp_update_stats_stream(struct vfe_device *vfe_dev, void *arg) struct msm_vfe_axi_stream_cfg_update_info *update_info = NULL; struct msm_isp_sw_framskip *sw_skip_info = NULL; + if (update_cmd->num_streams > MSM_ISP_STATS_MAX) { + pr_err("%s: Invalid num_streams %d\n", + __func__, update_cmd->num_streams); + return -EINVAL; + } + /* validate request */ for (i = 0; i < update_cmd->num_streams; i++) { update_info = (struct msm_vfe_axi_stream_cfg_update_info *) |