Fix crash when zero copy mode with I420 format

- The pointer "buffer_bo_handle[1].ptr" is invalid at that case.

[Version] 0.4.98
[Issue Type] Bug fix

Change-Id: Ic39f533eb226d31346c8abcd7798cddb692e9df5
Signed-off-by: Jeongmo Yang <jm80.yang@samsung.com>

diff --git a/packaging/capi-media-camera.spec b/packaging/capi-media-camera.spec
index 624636cb0fb442b8ef1d3c5fdbf842f885fdd67e..ba29c341247bf45f0d449b3e45560269a91c4983 100644 (file)
--- a/packaging/capi-media-camera.spec
+++ b/packaging/capi-media-camera.spec
@@ -1,6 +1,6 @@
 Name:       capi-media-camera
 Summary:    A Camera API
-Version:    0.4.97
+Version:    0.4.98
 Release:    0
 Group:      Multimedia/API
 License:    Apache-2.0

diff --git a/src/camera_internal.c b/src/camera_internal.c
index fe5468b2b6f0fdbf8e355af489e86bcf57e1f7ba..577ab8e90edd8d4d4aa4dadc9acbfacad659cd5c 100644 (file)
--- a/src/camera_internal.c
+++ b/src/camera_internal.c
@@ -204,7 +204,7 @@ void camera_create_preview_frame(MMCamcorderVideoStreamDataType *stream, int num
                                frame->data.triple_plane.v = buffer_bo_handle[2].ptr;
                        } else {
                                frame->data.triple_plane.u = buffer_bo_handle[0].ptr + stream->data.yuv420p.length_y;
-                               frame->data.triple_plane.v = buffer_bo_handle[1].ptr + stream->data.yuv420p.length_u;
+                               frame->data.triple_plane.v = frame->data.triple_plane.u + stream->data.yuv420p.length_u;
                        }
                        frame->data.triple_plane.y_size = stream->data.yuv420p.length_y;
                        frame->data.triple_plane.u_size = stream->data.yuv420p.length_u;