msm: camera: common: Fix possible OOB reads and writes operation
We need to check if the packet is valid before using it. CRs-Fixed: 3605421 Change-Id: Ide4e005ba46690c1cac02cb77a2d9aaa497b15df Signed-off-by: mingpan <quic_mingpan@quicinc.com> (cherry picked from commit 0156c0475a4c6c042eb84fcfbc14b3e837e0cb4c)
Cette révision appartient à :
@@ -169,6 +169,10 @@ static int cam_jpeg_add_command_buffers(struct cam_packet *packet,
|
||||
num_entry);
|
||||
|
||||
for (i = 0; i < packet->num_cmd_buf; i++) {
|
||||
rc = cam_packet_util_validate_cmd_desc(&cmd_desc[i]);
|
||||
if (rc)
|
||||
return rc;
|
||||
|
||||
CAM_DBG(CAM_JPEG,
|
||||
"Metadata: %u Offset: 0x%x Length: %u mem_handle: 0x%x num_entry: %d",
|
||||
cmd_desc[i].meta_data, cmd_desc[i].offset,
|
||||
|
Référencer dans un nouveau ticket
Bloquer un utilisateur