Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d9a71866 authored by Mauro Carvalho Chehab's avatar Mauro Carvalho Chehab
Browse files

media: mt9v111: avoid going past the buffer 



As warned by smatch:
	drivers/media/i2c/mt9v111.c:854 mt9v111_enum_frame_size() error: buffer overflow 'mt9v111_frame_sizes' 5 <= 5
	drivers/media/i2c/mt9v111.c:855 mt9v111_enum_frame_size() error: buffer overflow 'mt9v111_frame_sizes' 5 <= 5
	drivers/media/i2c/mt9v111.c:856 mt9v111_enum_frame_size() error: buffer overflow 'mt9v111_frame_sizes' 5 <= 5
	drivers/media/i2c/mt9v111.c:857 mt9v111_enum_frame_size() error: buffer overflow 'mt9v111_frame_sizes' 5 <= 5

Signed-off-by: default avatarMauro Carvalho Chehab <mchehab+samsung@kernel.org>
parent 75070c6a

drivers/media/i2c/mt9v111.c

+1 −1
Original line number Diff line number Diff line
@@ -848,7 +848,7 @@ static int mt9v111_enum_frame_size(struct v4l2_subdev *subdev, 
				   struct v4l2_subdev_pad_config *cfg,

				   struct v4l2_subdev_frame_size_enum *fse)

{

	if (fse->pad || fse->index > ARRAY_SIZE(mt9v111_frame_sizes))

	if (fse->pad || fse->index >= ARRAY_SIZE(mt9v111_frame_sizes))

		return -EINVAL;



	fse->min_width = mt9v111_frame_sizes[fse->index].width;