nv-tegra-mirror/linux-nv-oot
1
0
Fork 0
mirror of git://nv-tegra.nvidia.com/linux-nv-oot.git synced 2025-12-24 02:01:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

linux: kmd: static analysis TOP25 03/05 Part 9

Browse Source 
Under the following path:
- drivers/media/platform/tegra/camera/fusa-capture/capture-vi-channel.c
- drivers/media/platform/tegra/camera/vi/mc_common.c
- drivers/platform/tegra/rtcpu/capture-ivc.c
- drivers/platform/tegra/rtcpu/ivc-bus.c
- drivers/platform/tegra/rtcpu/reset-group.c

Jira CAMERASW-32533

Change-Id: I4b3d36c77ab09cd930c80fe07846fd9e0e9c28df
Signed-off-by: Zhiyuan Wang <zhiwang@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/c/linux-nv-oot/+/3314106
Reviewed-by: Frank Chen <frankc@nvidia.com>
Tested-by: Patrick Young <payoung@nvidia.com>
Reviewed-by: Ajith Kumar <ajithk@nvidia.com>
GVS: buildbot_gerritrpt <buildbot_gerritrpt@nvidia.com>
Reviewed-by: Semi Malinen <smalinen@nvidia.com>
This commit is contained in:
Zhiyuan Wang
2025-03-05 03:19:35 -08:00
committed by Jon Hunter
parent bca162a20d
commit c4fb69048c
5 changed files with 89 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
drivers/platform/tegra/rtcpu/reset-group.c
View File

@@ -1,5 +1,5 @@
// SPDX-License-Identifier: GPL-2.0
// Copyright (c) 2023, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
// SPDX-License-Identifier: GPL-2.0-only
// SPDX-FileCopyrightText: Copyright (c) 2023-2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
#include "reset-group.h"
@@ -37,6 +37,7 @@ struct camrtc_reset_group *camrtc_reset_group_get(
size_t group_name_len;
int index;
int ret;
size_t sum = 0U;
if (!dev || !dev->of_node)
return ERR_PTR(-EINVAL);
@@ -50,9 +51,20 @@ struct camrtc_reset_group *camrtc_reset_group_get(
if (ret < 0)
return ERR_PTR(-ENOENT);
if (__builtin_add_overflow(offsetof(struct camrtc_reset_group, resets[ret]),
group_name_len, &sum)) {
dev_err(dev, "Reset group size overflow\n");
return ERR_PTR(-EOVERFLOW);
}
if (__builtin_add_overflow(sum, 1U, &sum)) {
dev_err(dev, "Reset group size overflow\n");
return ERR_PTR(-EOVERFLOW);
}
grp = devres_alloc(camrtc_reset_group_release,
offsetof(struct camrtc_reset_group, resets[ret]) +
group_name_len + 1,
sum,
GFP_KERNEL);
if (!grp)
return ERR_PTR(-ENOMEM);