Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 48b6dc3e authored by Rahul Sharma's avatar Rahul Sharma Committed by Gerrit - the friendly Code Review server
Browse files

msm: ais: sensor: Fix out of bound read for region params 



The region index is not validated against the region size.
This causes out-of-bound read on the KASAN kernel. Hence
adding restriction that region index is smaller than region size.

Change-Id: I3ebccee89f6e48a84389eb3b9055bc6e09e0310b
Signed-off-by: default avatarRahul Sharma <sharah@codeaurora.org>
parent a2143369

drivers/media/platform/msm/ais/sensor/actuator/msm_actuator.c

+3 −1
Original line number Diff line number Diff line 
/* Copyright (c) 2011-2017, The Linux Foundation. All rights reserved.

/* Copyright (c) 2011-2018, The Linux Foundation. All rights reserved.

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License version 2 and
@@ -646,6 +646,8 @@ static int32_t msm_actuator_move_focus( 
		a_ctrl->curr_step_pos, dest_step_pos, curr_lens_pos);



	while (a_ctrl->curr_step_pos != dest_step_pos) {

		if (a_ctrl->curr_region_index >= a_ctrl->region_size)

			break;

		step_boundary =

			a_ctrl->region_params[a_ctrl->curr_region_index].

			step_bound[dir];