| commit | 5d32fafc8341ec8b4cebecd18bbd81ea94466349 | [log] [tgz] |
|---|---|---|
| author | Gaoxiang Chen <gaochen@codeaurora.org> | Wed May 17 15:14:36 2017 +0800 |
| committer | Wong Johnny <johnny.wong@hi-p.com> | Fri Aug 18 15:11:29 2017 +0800 |
| tree | c47839a760adf64bbead81e91a8126e4c609e76c | |
| parent | 52110432ba5e631b65b7791f81ffcc9dc588b28c [diff] |
msm: camera: fix off-by-one overflow in msm_isp_get_bufq In msm_isp_get_bufq, if bufq_index equals buf_mgr->num_buf_q, it will pass the check, leading to off-by-one overflow (exceed the length of array by one element). FPIIM-1556 CRs-Fixed: 2031677 Bug: 36136563 Change-Id: I7ea465897e2c37de6ca0155c3e225f1444b3cf13 Signed-off-by: Gaoxiang Chen <gaochen@codeaurora.org>