Bound loop index
In some cases (when frame sizes for pixel formats are not available) the loop will
be not properly bounded, and may cause a crash.
Change-Id: I2f2380ab4e2f7454bff8eeabcaff4e3f238fe71e
diff --git a/android/camera/camera-capture-linux.c b/android/camera/camera-capture-linux.c
index 32d8b0c..b9a4227 100644
--- a/android/camera/camera-capture-linux.c
+++ b/android/camera/camera-capture-linux.c
@@ -700,7 +700,7 @@
}
arr = *fmts;
memset(arr, 0, fmt_num * sizeof(QemuPixelFormat));
- for (n = 0; out_num < fmt_num; n++) {
+ for (n = 0; n < fmt_num && out_num < fmt_num; n++) {
fmt_enum.index = n;
fmt_enum.type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
if(_xioctl(cd->handle, VIDIOC_ENUM_FMT, &fmt_enum)) {