Merge "msm: camera: isp: Add bound check for an array" (37bca2d3) · Commits · e / devices / android_kernel_sony_msm8998

drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c

+6 −0

Original line number	Diff line number	Diff line
		@@ -2480,6 +2480,12 @@ int msm_isp_ab_ib_update_lpm_mode(struct vfe_device vfe_dev, void arg)
		rc = -1;
		return rc;
		}
		if (ab_ib_vote->num_src >= VFE_AXI_SRC_MAX) {
		pr_err("%s: ab_ib_vote num_src is exceeding limit\n",
		__func__);
		rc = -1;
		return rc;
		}
		if (ab_ib_vote->lpm_mode) {
		for (i = 0; i < ab_ib_vote->num_src; i++) {
		stream_info =