diff options
| author | Eva Huang <evahuang@google.com> | 2022-01-07 21:26:06 +0800 |
|---|---|---|
| committer | Eva Huang <evahuang@google.com> | 2022-01-07 21:26:06 +0800 |
| commit | a785bd90b184f3086c5a3f86b9abfbda89d06726 (patch) | |
| tree | 1853a44394a4d81adda2290811811aad8d717632 | |
| parent | 774ebf349f07a0d97be21f668c306011c26693e1 (diff) | |
| parent | 9c592dac30db21c8b94c5cdff373ce4f595685e5 (diff) | |
| download | camera-kernel-a785bd90b184f3086c5a3f86b9abfbda89d06726.tar.gz | |
Merge branch 'android-msm-barbet-4.19-sc-security' into android-msm-barbet-4.19-sc-v2android-s-v2-beta-3_r0.5android-12.1.0_r0.5android-12.1.0_r0.21android-12.1.0_r0.15android-msm-barbet-4.19-s-v2-beta-3android-msm-barbet-4.19-android12L
Mar 2022.1
Bug: 204107400
Change-Id: Ia35cd4ccbbaeb1e771575f2bcf8adb42658ae9d7
| -rw-r--r-- | drivers/cam_jpeg/jpeg_hw/cam_jpeg_hw_mgr.c | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/drivers/cam_jpeg/jpeg_hw/cam_jpeg_hw_mgr.c b/drivers/cam_jpeg/jpeg_hw/cam_jpeg_hw_mgr.c index 4d6e4a4..c27b206 100644 --- a/drivers/cam_jpeg/jpeg_hw/cam_jpeg_hw_mgr.c +++ b/drivers/cam_jpeg/jpeg_hw/cam_jpeg_hw_mgr.c @@ -728,10 +728,11 @@ static int cam_jpeg_mgr_prepare_hw_update(void *hw_mgr_priv, } if ((packet->num_cmd_buf > 5) || !packet->num_patches || - !packet->num_io_configs) { - CAM_ERR(CAM_JPEG, "wrong number of cmd/patch info: %u %u", - packet->num_cmd_buf, - packet->num_patches); + !packet->num_io_configs || + (packet->num_io_configs > CAM_JPEG_IMAGE_MAX)) { + CAM_ERR(CAM_JPEG, "wrong number of cmd/patch info: %u %u %u", + packet->num_cmd_buf, packet->num_patches, + packet->num_io_configs); return -EINVAL; } |