Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6599529e authored by VijayaKumar T M's avatar VijayaKumar T M
Browse files

msm: camera: validate num_streams in stream_cfg_cmd before using it 



stream_cfg_cmd->num_streams is from userspace,
need to check it against MSM_ISP_STATS_MAX before using it.

CRs-Fixed: 2029867
Change-Id: I2ab892b7d406fc56de94c261a396866269e91d1a
Signed-off-by: default avatarGaoxiang Chen <gaochen@codeaurora.org>
Signed-off-by: default avatarVijayaKumar T M <vtmuni@codeaurora.org>
parent 827c6ada

drivers/media/platform/msm/camera_v2/isp/msm_isp_stats_util.c

+6 −0
Original line number Diff line number Diff line
@@ -860,6 +860,12 @@ int msm_isp_cfg_stats_stream(struct vfe_device *vfe_dev, void *arg) 
	if (vfe_dev->stats_data.num_active_stream == 0)

		vfe_dev->hw_info->vfe_ops.stats_ops.cfg_ub(vfe_dev);



	if (stream_cfg_cmd->num_streams > MSM_ISP_STATS_MAX) {

		pr_err("%s invalid num_streams %d\n", __func__,

			stream_cfg_cmd->num_streams);

		return -EINVAL;

	}



	if (stream_cfg_cmd->enable) {

		msm_isp_stats_update_cgc_override(vfe_dev, stream_cfg_cmd);