msm: camera: isp: fix for out of bound access array
There is no bound check in stream_cfg_cmd->num_streams,
in functions msm_isp_check_stream_cfg_cmd and
msm_isp_stats_update_cgc_override num_streams is used as
the index for stream_cfg_cmd->stream_handle array which
has a size of 15. Current code did not check the num_streams
to make sure that did not exceed the array size
CRs-Fixed: 2006015
Change-Id: I7f195c764a4e6c12e4f7c680bc3c9aa7b078e625
Signed-off-by:
Senthil Kumar Rajagopal <skrajago@codeaurora.org>
Loading
Please register or sign in to comment