]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
media: synopsys: csi2rx: fix out-of-bounds check for formats array
authorMichael Riesch <michael.riesch@collabora.com>
Mon, 16 Feb 2026 12:28:47 +0000 (13:28 +0100)
committerMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Wed, 18 Mar 2026 10:21:30 +0000 (11:21 +0100)
The out-of-bounds check for the format array is off by one. Fix the
check.

Fixes: 355a11004066 ("media: synopsys: add driver for the designware mipi csi-2 receiver")
Cc: stable@kernel.org
Suggested-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Michael Riesch <michael.riesch@collabora.com>
Reviewed-by: Frank Li <Frank.Li@nxp.com>
Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
drivers/media/platform/synopsys/dw-mipi-csi2rx.c

index 170346ae1a599e43bba9d19476ee4d65124303bd..4d96171a650b6d28c804f10ea736cae95f6e0164 100644 (file)
@@ -301,7 +301,7 @@ dw_mipi_csi2rx_enum_mbus_code(struct v4l2_subdev *sd,
 
                return 0;
        case DW_MIPI_CSI2RX_PAD_SINK:
-               if (code->index > csi2->formats_num)
+               if (code->index >= csi2->formats_num)
                        return -EINVAL;
 
                code->code = csi2->formats[code->index].code;