Merge "msm: camera_v3: sensor: Subtract offset before validating cmd desc" (442caadc) · Commits · e / devices / android_kernel_fairphone_FP3

drivers/media/platform/msm/camera_v3/cam_sensor_module/cam_sensor_utils/cam_sensor_util.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -338,6 +338,7 @@ int cam_sensor_i2c_command_parser(
		cmd_buf = (uint32_t *)generic_ptr;
		cmd_buf += cmd_desc[i].offset / sizeof(uint32_t);

		remain_len -= cmd_desc[i].offset;
		if (remain_len < cmd_desc[i].length) {
		CAM_ERR(CAM_SENSOR, "buffer provided too small");
		return -EINVAL;