Browse Source

msm: camera: tfe: add upperbound for query cap num devices

Add check for upperbound for num devices obtained from query cap v2
preventing integer overflow.

CRs-Fixed: 3864081
Change-Id: I899c794bad2278f39dbea3f80ca701e54cf8d1a9
Signed-off-by: Pranav Sanwal <[email protected]>
Pranav Sanwal 8 tháng trước cách đây
mục cha
commit
958e63b8bb
1 tập tin đã thay đổi với 2 bổ sung1 xóa
  1. 2 1
      drivers/cam_isp/isp_hw_mgr/cam_tfe_hw_mgr.c

+ 2 - 1
drivers/cam_isp/isp_hw_mgr/cam_tfe_hw_mgr.c

@@ -295,7 +295,8 @@ static int cam_tfe_mgr_get_hw_caps_v2(void *hw_mgr_priv,
 		return -EINVAL;
 	}
 
-	if (!tmp_query_isp_v2.num_dev) {
+	if (!tmp_query_isp_v2.num_dev ||
+			tmp_query_isp_v2.num_dev > CAM_TFE_CSID_HW_NUM_MAX) {
 		CAM_ERR(CAM_ISP, "Invalid Num of dev is %d query cap version %d",
 			tmp_query_isp_v2.num_dev, tmp_query_isp_v2.version);
 		rc = -EINVAL;