Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 855e7715 authored by Mounika Reddy Tangirala's avatar Mounika Reddy Tangirala
Browse files

msm: sensor: actuator: fix out of bound read for region params 



Issue:
the region index is not validated against the region size.
this cause out-of-bound read on the KASAN kernel.

Fix:
Add restriction that region index smaller than region size.

Change-Id: I141bba45662769f0661c947fb642c2671578f32e
Signed-off-by: default avatarMounika Reddy Tangirala <mtangi@codeaurora.org>
parent 17eb0120

drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c

+3 −1
Original line number Diff line number Diff line 
/* Copyright (c) 2011-2018, The Linux Foundation. All rights reserved.

/* Copyright (c) 2011-2019, The Linux Foundation. All rights reserved.

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License version 2 and
@@ -647,6 +647,8 @@ static int32_t msm_actuator_move_focus( 
		a_ctrl->curr_step_pos, dest_step_pos, curr_lens_pos);



	while (a_ctrl->curr_step_pos != dest_step_pos) {

		if (a_ctrl->curr_region_index >= a_ctrl->region_size)

			break;

		step_boundary =

			a_ctrl->region_params[

			a_ctrl->curr_region_index].step_bound[dir];