Fix Svace issue

[Version] 0.2.98
[Profile] Common
[Issue Type]
[Dependency module] N/A

Change-Id: Icf5f0399350852a3b5bc08d4581b78a60c9b1922
Signed-off-by: Jeongmo Yang <jm80.yang@samsung.com>

diff --git a/packaging/capi-media-camera.spec b/packaging/capi-media-camera.spec
index 4eb5276..9996ab1 100644 (file)
--- a/packaging/capi-media-camera.spec
+++ b/packaging/capi-media-camera.spec
@@ -1,6 +1,6 @@
 Name:       capi-media-camera
 Summary:    A Camera API
-Version:    0.2.97
+Version:    0.2.98
 Release:    0
 Group:      Multimedia/API
 License:    Apache-2.0

diff --git a/src/camera.c b/src/camera.c
index a74860f..9ce9616 100644 (file)
--- a/src/camera.c
+++ b/src/camera.c
@@ -1175,6 +1175,12 @@ static void _camera_client_user_callback(camera_cb_info_s *cb_info, char *recv_m
 
                        CAMERA_MSG_PARAM_SET(param, INT, tbm_key);
 
+                       if (num_buffer_key < 0 || num_buffer_key > BUFFER_MAX_PLANE_NUM) {
+                               LOGE("invalid num buffer key %d", num_buffer_key);
+                               _camera_msg_send_param1(MUSE_CAMERA_API_RETURN_BUFFER, cb_info, NULL, &param, 0);
+                               break;
+                       }
+
                        if (data_key > 0) {
                                /* import tbm data_bo and get virtual address */
                                if (!_camera_import_tbm_key(cb_info->bufmgr, data_key, &data_bo, &data_bo_handle)) {