Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6e893ca2 authored by Mauro Carvalho Chehab's avatar Mauro Carvalho Chehab
Browse files

media: qcom: don't go past the array 



As reported by smatch:

	drivers/media/platform/qcom/camss-8x16/camss-vfe.c:1136 vfe_release_wm() error: buffer overflow 'vfe->wm_output_map' 7 <= 7

Signed-off-by: default avatarMauro Carvalho Chehab <mchehab@s-opensource.com>
parent 07aac5dc

drivers/media/platform/qcom/camss-8x16/camss-vfe.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -1130,7 +1130,7 @@ static int vfe_reserve_wm(struct vfe_device *vfe, enum vfe_line_id line_id) 




static int vfe_release_wm(struct vfe_device *vfe, u8 wm)

static int vfe_release_wm(struct vfe_device *vfe, u8 wm)

{

{

	if (wm > ARRAY_SIZE(vfe->wm_output_map))

	if (wm >= ARRAY_SIZE(vfe->wm_output_map))

		return -EINVAL;

		return -EINVAL;





	vfe->wm_output_map[wm] = VFE_LINE_NONE;

	vfe->wm_output_map[wm] = VFE_LINE_NONE;