Merge "msm: ispif: fix the OOB read issue" (ac821156) · Commits · e / devices / android_kernel_sony_msm8998

drivers/media/platform/msm/camera_v2/ispif/msm_ispif.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -1025,6 +1025,9 @@ static void msm_ispif_config_stereo(struct ispif_device *ispif,
		enum msm_ispif_vfe_intf vfe_intf;
		uint32_t stereo_3d_threshold = STEREO_DEFAULT_3D_THRESHOLD;

		if (params->num > MAX_PARAM_ENTRIES)
		return;

		for (i = 0; i < params->num; i++) {
		vfe_intf = params->entries[i].vfe_intf;
		if (!msm_ispif_is_intf_valid(ispif->csid_version, vfe_intf)) {