Commit 37f206cc authored Jul 12, 2017 by Soundrapandian Jeyaprakash

msm: camera: fix the slab-out-of-bounds in the camera driver



The arrays are accessed beyond the allocated size. fixed the
loop condition to iterate within the boundary.

CRs-Fixed: 2075382

Change-Id: I2cccf942e45f67de37565db71a0f37af433f3fbb
Signed-off-by: Soundrapandian Jeyaprakash <jsoundra@codeaurora.org>

parent cdd957e9

drivers/media/platform/msm/camera/cam_utils/cam_soc_util.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -574,7 +574,7 @@ static int cam_soc_util_get_gpio_info(struct cam_hw_soc_info *soc_info)
		goto free_gpio_array;
		}

		for (i = 0; i <= gpio_array_size; i++)
		for (i = 0; i < gpio_array_size; i++)
		gconf->cam_gpio_common_tbl[i].gpio = gpio_array[i];

		gconf->cam_gpio_common_tbl_size = gpio_array_size;