瀏覽代碼

Merge "msm: camera: isp: Fix incorrect offset validation in __cam_isp_ctx_dump_event_record" into camera-kernel.lnx.7.0

cheese Service 7 月之前
父節點
當前提交
29bb30ec66
共有 1 個文件被更改,包括 2 次插入3 次删除
  1. 2 3
      drivers/cam_isp/cam_isp_context.c

+ 2 - 3
drivers/cam_isp/cam_isp_context.c

@@ -286,9 +286,8 @@ static int __cam_isp_ctx_dump_event_record(
 			return -ENOSPC;
 		}
 
-		min_len = sizeof(struct cam_isp_context_dump_header) +
-			((num_entries * CAM_ISP_CTX_DUMP_EVENT_NUM_WORDS) *
-				sizeof(uint64_t));
+		min_len = (sizeof(struct cam_isp_context_dump_header) +
+			(CAM_ISP_CTX_DUMP_EVENT_NUM_WORDS * sizeof(uint64_t))) * num_entries;
 		remain_len = dump_args->buf_len - dump_args->offset;
 
 		if (remain_len < min_len) {