diff --git a/drivers/cam_isp/isp_hw_mgr/cam_tfe_hw_mgr.c b/drivers/cam_isp/isp_hw_mgr/cam_tfe_hw_mgr.c index 667f40371b..fed81f0412 100644 --- a/drivers/cam_isp/isp_hw_mgr/cam_tfe_hw_mgr.c +++ b/drivers/cam_isp/isp_hw_mgr/cam_tfe_hw_mgr.c @@ -295,7 +295,8 @@ static int cam_tfe_mgr_get_hw_caps_v2(void *hw_mgr_priv, return -EINVAL; } - if (!tmp_query_isp_v2.num_dev) { + if (!tmp_query_isp_v2.num_dev || + tmp_query_isp_v2.num_dev > CAM_TFE_CSID_HW_NUM_MAX) { CAM_ERR(CAM_ISP, "Invalid Num of dev is %d query cap version %d", tmp_query_isp_v2.num_dev, tmp_query_isp_v2.version); rc = -EINVAL;