Re: [PATCH] media: atomisp: reject short _DSM packages

[Andy Shevchenko]

On Tue, Nov 03, 2026 at 07:41:21PM +0800, Kang Chen wrote:
> gmin_get_config_dsm_var() walks the package returned by the atomisp
> _DSM function, but it does not reject packages with fewer than two
> elements.  count is unsigned, so an empty package makes count - 1
> evaluate to UINT_MAX and the loop walks far past the end of the
> elements array, reading unrelated memory.
> 
> Require at least two elements before scanning the key/value pairs.

Stop being a meat proxy to AI. Read the code.
NAK.

-- 
With Best Regards,
Andy Shevchenko