Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 71901f5c authored by Trishansh Bhardwaj's avatar Trishansh Bhardwaj
Browse files

msm: isp: Fix NULL pointer dereference. 



In case of single vfe dump_data.vfe_dev is left uninitialize
resulting crash in msm_isp_dump_ping_pong_mismatch.

CRs-Fixed: 1075476
Change-Id: I8bdfb03acc233d302aa98c68b9b66e195d7f428f
Signed-off-by: default avatarTrishansh Bhardwaj <tbhardwa@codeaurora.org>
parent 6bee3417

drivers/media/platform/msm/camera_v2/isp/msm_isp_util.c

+1 −1
Original line number Diff line number Diff line
@@ -1914,12 +1914,12 @@ irqreturn_t msm_isp_process_irq(int irq_num, void *data) 
		ISP_DBG("%s: error_mask0/1 & error_count are set!\n", __func__);

		return IRQ_HANDLED;

	}

	dump_data.vfe_dev = (struct vfe_device *) data;

	if (vfe_dev->is_split &&

		(vfe_dev->common_data->dual_vfe_res->vfe_dev[

			!vfe_dev->pdev->id]) &&

		(vfe_dev->common_data->dual_vfe_res->vfe_dev[

			!vfe_dev->pdev->id]->vfe_open_cnt)) {

		dump_data.vfe_dev = (struct vfe_device *) data;

		spin_lock(&dump_irq_lock);

		dump_data.arr[dump_data.first].current_vfe_irq.

			vfe_id = vfe_dev->pdev->id;