summaryrefslogtreecommitdiff
path: root/drivers
diff options
context:
space:
mode:
authorLinux Build Service Account <lnxbuild@quicinc.com>2017-09-13 10:58:08 -0700
committerGerrit - the friendly Code Review server <code-review@localhost>2017-09-13 10:58:07 -0700
commite3d53f3d2ea647dba3dce69e5ff0b6334267b59f (patch)
tree40350d16cfd6786373bc3543cad475cbba5f9449 /drivers
parent9d4ca70315464b4ecec85c50cdaa834e70029863 (diff)
parenta476e30e307b213086a8716fdaafe7fccdb74b35 (diff)
Merge "msm: camera: fix off-by-one overflow in msm_isp_get_bufq"
Diffstat (limited to 'drivers')
-rw-r--r--drivers/media/platform/msm/camera_v2/isp/msm_buf_mgr.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/media/platform/msm/camera_v2/isp/msm_buf_mgr.c b/drivers/media/platform/msm/camera_v2/isp/msm_buf_mgr.c
index 8f3cffb4c3da..eab56b70e646 100644
--- a/drivers/media/platform/msm/camera_v2/isp/msm_buf_mgr.c
+++ b/drivers/media/platform/msm/camera_v2/isp/msm_buf_mgr.c
@@ -86,7 +86,7 @@ struct msm_isp_bufq *msm_isp_get_bufq(
/* bufq_handle cannot be 0 */
if ((bufq_handle == 0) ||
bufq_index >= BUF_MGR_NUM_BUF_Q ||
- (bufq_index > buf_mgr->num_buf_q))
+ (bufq_index >= buf_mgr->num_buf_q))
return NULL;
bufq = &buf_mgr->bufq[bufq_index];