msm: camera: tfe: add upperbound for query cap num devices

Add check for upperbound for num devices obtained from query cap v2
preventing integer overflow.

CRs-Fixed: 3864081
Change-Id: I899c794bad2278f39dbea3f80ca701e54cf8d1a9
Signed-off-by: Pranav Sanwal <quic_psanwal@quicinc.com>
This commit is contained in:
Pranav Sanwal 2024-07-09 16:08:40 +05:30
parent 6ddbe8dd37
commit 958e63b8bb

View File

@ -295,7 +295,8 @@ static int cam_tfe_mgr_get_hw_caps_v2(void *hw_mgr_priv,
return -EINVAL;
}
if (!tmp_query_isp_v2.num_dev) {
if (!tmp_query_isp_v2.num_dev ||
tmp_query_isp_v2.num_dev > CAM_TFE_CSID_HW_NUM_MAX) {
CAM_ERR(CAM_ISP, "Invalid Num of dev is %d query cap version %d",
tmp_query_isp_v2.num_dev, tmp_query_isp_v2.version);
rc = -EINVAL;