diff options
| author | Linux Build Service Account <lnxbuild@localhost> | 2017-03-09 17:21:38 -0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2017-03-09 17:21:37 -0800 |
| commit | 359d1d306019041db7f4f355a1001117212ff6fa (patch) | |
| tree | 3181c9f4ac599d6372e1edb9e840da0e5f9a5e2b /include/uapi | |
| parent | 96f718455bfd12690db99711fd644adaf13b2f90 (diff) | |
| parent | b5ac2b42fdd2fffc9d887f43491715d2f733497f (diff) | |
Merge "msm: camera: cpp: Fixing Heap overflow in output buffer"
Diffstat (limited to 'include/uapi')
| -rw-r--r-- | include/uapi/media/msmb_pproc.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/include/uapi/media/msmb_pproc.h b/include/uapi/media/msmb_pproc.h index b65669b87a21..8f454571e69d 100644 --- a/include/uapi/media/msmb_pproc.h +++ b/include/uapi/media/msmb_pproc.h @@ -16,6 +16,7 @@ #define MSM_CPP_MAX_FRAME_LENGTH 4096 #define MSM_CPP_MAX_FW_NAME_LEN 32 #define MAX_FREQ_TBL 10 +#define MSM_OUTPUT_BUF_CNT 8 enum msm_cpp_frame_type { MSM_CPP_OFFLINE_FRAME, @@ -76,7 +77,7 @@ struct msm_cpp_frame_info_t { uint32_t feature_mask; uint8_t we_disable; struct msm_cpp_buffer_info_t input_buffer_info; - struct msm_cpp_buffer_info_t output_buffer_info[8]; + struct msm_cpp_buffer_info_t output_buffer_info[MSM_OUTPUT_BUF_CNT]; struct msm_cpp_buffer_info_t duplicate_buffer_info; struct msm_cpp_buffer_info_t tnr_scratch_buffer_info[2]; uint32_t reserved; |