Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit cc19ad28 authored by Jeyaprakash Soundrapandian's avatar Jeyaprakash Soundrapandian Committed by Gerrit - the friendly Code Review server
Browse files

Merge "msm: camera: sensor: Subtract offset before validating cmd desc" into dev/msm-4.14-camx

parents a5b2f2c6 32d3795e

drivers/media/platform/msm/camera/cam_sensor_module/cam_sensor_utils/cam_sensor_util.c

+2 −1
Original line number Diff line number Diff line 
/* Copyright (c) 2017-2018, The Linux Foundation. All rights reserved.

/* Copyright (c) 2017-2019, The Linux Foundation. All rights reserved.

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License version 2 and
@@ -338,6 +338,7 @@ int cam_sensor_i2c_command_parser( 
		cmd_buf = (uint32_t *)generic_ptr;

		cmd_buf += cmd_desc[i].offset / sizeof(uint32_t);



		remain_len -= cmd_desc[i].offset;

		if (remain_len < cmd_desc[i].length) {

			CAM_ERR(CAM_SENSOR, "buffer provided too small");

			return -EINVAL;