Merge "msm: camera: isp: fix potential out of bounds" into camera-kernel.lnx.7.0

Cette révision appartient à :
Camera Software Integration
2023-12-07 21:17:58 -08:00
révisé par Gerrit - the friendly Code Review server
révision c5f0f907fd
5 fichiers modifiés avec 44 ajouts et 30 suppressions

Voir le fichier

@@ -4909,7 +4909,7 @@ static inline int cam_isp_context_apply_evt_injection(struct cam_context *ctx)
static inline void __cam_isp_ctx_update_fcg_prediction_idx(
struct cam_context *ctx,
uint32_t request_id,
uint64_t request_id,
struct cam_isp_fcg_prediction_tracker *fcg_tracker,
struct cam_isp_fcg_config_info *fcg_info)
{
@@ -9264,7 +9264,7 @@ int cam_isp_context_init(struct cam_isp_context *ctx,
if (rc) {
CAM_ERR(CAM_ISP, "Camera Context Base init failed, ctx_idx: %u, link: 0x%x",
ctx_base->ctx_id, ctx_base->link_hdl);
goto err;
goto free_mem;
}
/* FCG related struct setup */
@@ -9276,7 +9276,7 @@ int cam_isp_context_init(struct cam_isp_context *ctx,
"Failed to allocate memory for FCG struct, ctx_idx: %u, link: %x",
ctx_base->ctx_id, ctx_base->link_hdl);
rc = -ENOMEM;
goto kfree;
goto free_mem;
}
list_add_tail(&skip_info->list, &ctx->fcg_tracker.skipped_list);
@@ -9303,7 +9303,7 @@ int cam_isp_context_init(struct cam_isp_context *ctx,
return rc;
kfree:
free_mem:
list_for_each_entry_safe(skip_info, temp,
&ctx->fcg_tracker.skipped_list, list) {
list_del(&skip_info->list);