diff options
| author | Senthil Kumar Rajagopal <skrajago@codeaurora.org> | 2017-02-10 15:07:54 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2017-02-12 22:56:41 -0800 |
| commit | a452045792bc09548b4e1b940aa8adfed822b51c (patch) | |
| tree | 8b7ecb79eb42cdfd99b39b63c505ca5496bffb46 /tools/perf/scripts/python | |
| parent | 3a7e752617514960c5cecdf84e12b13dc63c04c7 (diff) | |
msm: camera: isp: Handle array out of bounds
The pointer qbuf_buf comes from userspace.
qbuf_buf->num_planes is used with no bound check,
which if set to a large value, it will overflow
buf_info->mapped_info and qbuf_buf->planes
CRs-Fixed: 2003798
Change-Id: I332e0424e57bb14b481a740604a09350e6f029a8
Signed-off-by: Senthil Kumar Rajagopal <skrajago@codeaurora.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions