This is an automated email from the ASF dual-hosted git repository. linguini pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/nuttx.git
commit 84bcb12fff9a89bf735023e8afd02139a927b879 Author: yangyalei <[email protected]> AuthorDate: Wed Nov 19 15:03:43 2025 +0800 nuttx/v4l2: Fix array access out of bounds Fix out-of-bounds access in v4l2 array handling. Signed-off-by: yangyalei <[email protected]> --- drivers/video/v4l2_cap.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/video/v4l2_cap.c b/drivers/video/v4l2_cap.c index 0c54dbe219a..6ccb1473a97 100644 --- a/drivers/video/v4l2_cap.c +++ b/drivers/video/v4l2_cap.c @@ -3451,7 +3451,7 @@ static int capture_enum_fmt(FAR struct file *filep, if (cmng->imgsensor && cmng->imgsensor->fmtdescs) { - if (f->index > cmng->imgsensor->fmtdescs_num) + if (f->index >= cmng->imgsensor->fmtdescs_num) { return -EINVAL; } @@ -3489,7 +3489,7 @@ static int capture_enum_frmsize(FAR struct file *filep, if (cmng->imgsensor && cmng->imgsensor->frmsizes) { - if (f->index > cmng->imgsensor->frmsizes_num) + if (f->index >= cmng->imgsensor->frmsizes_num) { return -EINVAL; } @@ -3534,7 +3534,7 @@ static int capture_enum_frminterval(FAR struct file *filep, if (cmng->imgsensor && cmng->imgsensor->frmintervals) { - if (f->index > cmng->imgsensor->frmintervals_num) + if (f->index >= cmng->imgsensor->frmintervals_num) { return -EINVAL; }
