msm: camera: Fix memory read by adding bounds check
Adds bound check on reg_cfg_cmd->u.dmi_info.hi_tbl_offset. IOCTL VIDIOC_MSM_VFE_REG_CFG uses usersupplied value without performing bounds check for following cmd_type. VFE_READ_DMI_16BIT VFE_READ_DMI_32BIT VFE_READ_DMI_64BIT Bug: 28815326 CRs-Fixed: 1034641 Change-Id: Ic57c502edb7aed001b8d4656e28f117fe6b7311b
Loading
Please register or sign in to comment