samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

msm: camera: reqmgr: Fix the crm driver

Browse Source 
Add a check in the request manager code
to prevent the possible out of bound
array access.

CRs-Fixed: 3051099
Change-Id: I4b4ec5778d83aa8993225cae0cd599a02f526082
Signed-off-by: Jigar Agrawal <jigar@codeaurora.org>
This commit is contained in:
Jigar Agrawal
2021-10-05 12:24:55 -07:00
parent e15c969d3b
commit 41d8370e72
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
drivers/cam_req_mgr/cam_req_mgr_core.c
View File

@@ -2638,8 +2638,11 @@ static int __cam_req_mgr_try_cancel_req(struct cam_req_mgr_core_link *link,
case CRM_SLOT_STATUS_REQ_PENDING:
case CRM_SLOT_STATUS_REQ_APPLIED:
pd = __cam_req_mgr_get_dev_pd(link, CAM_REQ_MGR_DEVICE_IFE);
if (pd < 0)
if ((pd < 0) || (pd >= CAM_PIPELINE_DELAY_MAX)) {
CAM_ERR(CAM_CRM, "pd: %d link_hdl: 0x%x red_id: %d", pd,
link->link_hdl, flush_info->req_id);
return pd;
}
if (flush_info->req_id <= link->req.prev_apply_data[pd].req_id) {
CAM_WARN(CAM_CRM, "req %lld already applied to IFE on link 0x%x",