Commit b1fbe051 authored by Roel Kluin's avatar Roel Kluin Committed by Mauro Carvalho Chehab
Browse files

[media] exynos4-is: fimc-lite: Index out of bounds if no pixelcode found 



In case no valid pixelcode is found, an i of -1 after the loop is out of
bounds for the array.

Signed-off-by: default avatarRoel Kluin <roel.kluin@gmail.com>
Signed-off-by: default avatarSylwester Nawrocki <s.nawrocki@samsung.com>
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab@redhat.com>
parent e1163236

drivers/media/platform/exynos4-is/fimc-lite-reg.c

+2 −2
Original line number Diff line number Diff line
@@ -133,7 +133,7 @@ void flite_hw_set_source_format(struct fimc_lite *dev, struct flite_frame *f) 
	int i = ARRAY_SIZE(src_pixfmt_map);

	u32 cfg;



	while (--i >= 0) {

	while (--i) {

		if (src_pixfmt_map[i][0] == pixelcode)

			break;

	}
@@ -240,7 +240,7 @@ static void flite_hw_set_out_order(struct fimc_lite *dev, struct flite_frame *f) 
	u32 cfg = readl(dev->regs + FLITE_REG_CIODMAFMT);

	int i = ARRAY_SIZE(pixcode);



	while (--i >= 0)

	while (--i)

		if (pixcode[i][0] == f->fmt->mbus_code)

			break;

	cfg &= ~FLITE_REG_CIODMAFMT_YCBCR_ORDER_MASK;