Loading drivers/media/platform/msm/camera_v2/isp/msm_isp_util.c +4 −2 Original line number Diff line number Diff line Loading @@ -1204,7 +1204,8 @@ static int msm_isp_send_hw_cmd(struct vfe_device *vfe_dev, (UINT_MAX - reg_cfg_cmd->u.rw_info.len)) || ((reg_cfg_cmd->u.rw_info.reg_offset + reg_cfg_cmd->u.rw_info.len) > resource_size(vfe_dev->vfe_mem))) { resource_size(vfe_dev->vfe_mem)) || (reg_cfg_cmd->u.rw_info.reg_offset & 0x3)) { pr_err("%s:%d reg_offset %d len %d res %d\n", __func__, __LINE__, reg_cfg_cmd->u.rw_info.reg_offset, Loading Loading @@ -1304,7 +1305,8 @@ static int msm_isp_send_hw_cmd(struct vfe_device *vfe_dev, reg_cfg_cmd->u.mask_info.reg_offset) || (resource_size(vfe_dev->vfe_mem) < reg_cfg_cmd->u.mask_info.reg_offset + sizeof(temp))) { sizeof(temp)) || (reg_cfg_cmd->u.mask_info.reg_offset & 0x3)) { pr_err("%s: VFE_CFG_MASK: Invalid length\n", __func__); return -EINVAL; } Loading Loading
drivers/media/platform/msm/camera_v2/isp/msm_isp_util.c +4 −2 Original line number Diff line number Diff line Loading @@ -1204,7 +1204,8 @@ static int msm_isp_send_hw_cmd(struct vfe_device *vfe_dev, (UINT_MAX - reg_cfg_cmd->u.rw_info.len)) || ((reg_cfg_cmd->u.rw_info.reg_offset + reg_cfg_cmd->u.rw_info.len) > resource_size(vfe_dev->vfe_mem))) { resource_size(vfe_dev->vfe_mem)) || (reg_cfg_cmd->u.rw_info.reg_offset & 0x3)) { pr_err("%s:%d reg_offset %d len %d res %d\n", __func__, __LINE__, reg_cfg_cmd->u.rw_info.reg_offset, Loading Loading @@ -1304,7 +1305,8 @@ static int msm_isp_send_hw_cmd(struct vfe_device *vfe_dev, reg_cfg_cmd->u.mask_info.reg_offset) || (resource_size(vfe_dev->vfe_mem) < reg_cfg_cmd->u.mask_info.reg_offset + sizeof(temp))) { sizeof(temp)) || (reg_cfg_cmd->u.mask_info.reg_offset & 0x3)) { pr_err("%s: VFE_CFG_MASK: Invalid length\n", __func__); return -EINVAL; } Loading