From 2446451028e14123afb18cd58f16f43098f394c6 Mon Sep 17 00:00:00 2001 From: Jeongmo Yang Date: Tue, 7 Mar 2017 16:28:31 +0900 Subject: [PATCH] Fix Svace issue [Version] 0.2.98 [Profile] Common [Issue Type] [Dependency module] N/A Change-Id: Icf5f0399350852a3b5bc08d4581b78a60c9b1922 Signed-off-by: Jeongmo Yang --- packaging/capi-media-camera.spec | 2 +- src/camera.c | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/packaging/capi-media-camera.spec b/packaging/capi-media-camera.spec index 4eb5276..9996ab1 100644 --- a/packaging/capi-media-camera.spec +++ b/packaging/capi-media-camera.spec @@ -1,6 +1,6 @@ Name: capi-media-camera Summary: A Camera API -Version: 0.2.97 +Version: 0.2.98 Release: 0 Group: Multimedia/API License: Apache-2.0 diff --git a/src/camera.c b/src/camera.c index a74860f..9ce9616 100644 --- a/src/camera.c +++ b/src/camera.c @@ -1175,6 +1175,12 @@ static void _camera_client_user_callback(camera_cb_info_s *cb_info, char *recv_m CAMERA_MSG_PARAM_SET(param, INT, tbm_key); + if (num_buffer_key < 0 || num_buffer_key > BUFFER_MAX_PLANE_NUM) { + LOGE("invalid num buffer key %d", num_buffer_key); + _camera_msg_send_param1(MUSE_CAMERA_API_RETURN_BUFFER, cb_info, NULL, ¶m, 0); + break; + } + if (data_key > 0) { /* import tbm data_bo and get virtual address */ if (!_camera_import_tbm_key(cb_info->bufmgr, data_key, &data_bo, &data_bo_handle)) { -- 2.7.4