Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 216786ec authored by Ravi Kishore Tanuku's avatar Ravi Kishore Tanuku Committed by Xu Han
Browse files

msm: camera: cci: add out of boundary check 



Cci transactions are optimized by comparing i2c addresses
in consecutive commands using pointer to command.
Add boundary check to ensure that pointers to command do
not go out of bounds.

Change-Id: Id835bf3276c91cd80c3ef59e6648a6d6792d2567
Signed-off-by: default avatarRavi Kishore Tanuku <rktanuku@codeaurora.org>
Signed-off-by: default avatarXu Han <hanxu@codeaurora.org>
parent 07c0864f

drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c

+1 −1
Original line number Diff line number Diff line
@@ -331,7 +331,7 @@ static int32_t msm_cci_calc_cmd_len(struct cci_device *cci_dev, 
		pack_max_len = size < (cci_dev->payload_size-len) ?

			size : (cci_dev->payload_size-len);

		for (i = 0; i < pack_max_len;) {

			if (cmd->delay)

			if (cmd->delay || ((cmd - i2c_cmd) >= cmd_size))

				break;

			if (cmd->reg_addr + 1 ==

				(cmd+1)->reg_addr) {