Merge "msm: sde: Add check for plane_count range in SDE rotator" into msm-4.9 (96e12367) · Commits · e / devices / android_kernel_fairphone_FP3

drivers/media/platform/msm/sde/rotator/sde_rotator_core.c

+6 −0

Original line number	Diff line number	Diff line
		@@ -550,6 +550,12 @@ static int sde_rotator_import_buffer(struct sde_layer_buffer *buffer,
		if (!input)
		dir = DMA_FROM_DEVICE;

		if (buffer->plane_count > SDE_ROT_MAX_PLANES) {
		SDEROT_ERR("buffer plane_count exceeds MAX_PLANE limit:%d\n",
		buffer->plane_count);
		return -EINVAL;
		}

		data->sbuf = buffer->sbuf;
		data->scid = buffer->scid;
		data->writeback = buffer->writeback;