sr030pc30: prevent array underflow in try_fmt()
Subsystems (2)
PATCH 1/1 sr030pc30: prevent array underflow in try_fmt()
Signed-off-by Dan Carpenter <[email protected]>
drivers/media/i2c/sr030pc30.c +5 -2
@@ -511,13 +511,16 @@ static int sr030pc30_get_fmt(struct v4l2_subdev *sd,static const struct sr030pc30_format *try_fmt (struct v4l2_subdev *sd,struct v4l2_mbus_framefmt *mf) { -int i =ARRAY_SIZE (sr030pc30_formats); +int i;sr030pc30_try_frame_size (mf); -while (i--) +for (i =0 ; i <ARRAY_SIZE (sr030pc30_formats); i++) {if (mf->code = sr030pc30_formats[i].code)break ; + } +if (i =ARRAY_SIZE (sr030pc30_formats)) + i =0 ; mf->code = sr030pc30_formats[i].code;