Commit bd0b5a35 authored by Dan Carpenter's avatar Dan Carpenter Committed by Mauro Carvalho Chehab
Browse files

media: sr030pc30: prevent array underflow in try_fmt() 



Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab@s-opensource.com>
parent 8f0aa382

drivers/media/i2c/sr030pc30.c

+5 −2
Original line number Diff line number Diff line
@@ -511,13 +511,16 @@ static int sr030pc30_get_fmt(struct v4l2_subdev *sd, 
static const struct sr030pc30_format *try_fmt(struct v4l2_subdev *sd,

					      struct v4l2_mbus_framefmt *mf)

{

	int i = ARRAY_SIZE(sr030pc30_formats);

	int i;



	sr030pc30_try_frame_size(mf);



	while (i--)

	for (i = 0; i < ARRAY_SIZE(sr030pc30_formats); i++) {

		if (mf->code == sr030pc30_formats[i].code)

			break;

	}

	if (i == ARRAY_SIZE(sr030pc30_formats))

		i = 0;



	mf->code = sr030pc30_formats[i].code;