From: Guennadi Liakhovetski <g.liakhovet...@gmx.de>

According to documentation of struct vb2_ops the .queue_setup() callback
should return an error if the number of planes parameter contains an
invalid value on input. Fix this instead of ignoring the value.

Signed-off-by: Guennadi Liakhovetski <guennadi.liakhovet...@intel.com>
Reviewed-by: Laurent Pinchart <laurent.pinch...@ideasonboard.com>
---
 drivers/media/usb/uvc/uvc_queue.c | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/drivers/media/usb/uvc/uvc_queue.c 
b/drivers/media/usb/uvc/uvc_queue.c
index aa2199775cb8..c8d78b2f3de4 100644
--- a/drivers/media/usb/uvc/uvc_queue.c
+++ b/drivers/media/usb/uvc/uvc_queue.c
@@ -82,9 +82,14 @@ static int uvc_queue_setup(struct vb2_queue *vq,
        struct uvc_streaming *stream = uvc_queue_to_stream(queue);
        unsigned size = stream->ctrl.dwMaxVideoFrameSize;
 
-       /* Make sure the image size is large enough. */
+       /*
+        * When called with plane sizes, validate them. The driver supports
+        * single planar formats only, and requires buffers to be large enough
+        * to store a complete frame.
+        */
        if (*nplanes)
-               return sizes[0] < size ? -EINVAL : 0;
+               return *nplanes != 1 || sizes[0] < size ? -EINVAL : 0;
+
        *nplanes = 1;
        sizes[0] = size;
        return 0;
-- 
Regards,

Laurent Pinchart

Reply via email to