summaryrefslogtreecommitdiffstats
path: root/drivers/media/video
diff options
context:
space:
mode:
authorJean-François Moine <moinejf@free.fr>2010-12-25 13:22:21 -0300
committerMauro Carvalho Chehab <mchehab@redhat.com>2010-12-29 08:17:06 -0200
commit76ebc16b87592350e4ea70681855171adf73f055 (patch)
tree58b5b5999e7d5748a7f772f9db1a4e0768af2436 /drivers/media/video
parentf2c5d92ecd4c69a4f86e76d19cb7663f2ebf4781 (diff)
downloadlinux-76ebc16b87592350e4ea70681855171adf73f055.tar.gz
linux-76ebc16b87592350e4ea70681855171adf73f055.tar.bz2
linux-76ebc16b87592350e4ea70681855171adf73f055.zip
[media] gspca - main: Check the isoc packet status before its length
When an error is set for an isochronous packet, the length of the packet may be null. In this case, the error was not detected and the image was not discarded as it should be. Reported-by: Franck Bourdonnec <fbourdonnec@chez.com> Signed-off-by: Jean-François Moine <moinejf@free.fr> Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
Diffstat (limited to 'drivers/media/video')
-rw-r--r--drivers/media/video/gspca/gspca.c12
1 files changed, 6 insertions, 6 deletions
diff --git a/drivers/media/video/gspca/gspca.c b/drivers/media/video/gspca/gspca.c
index 5a2274b2b0e8..03381c68b986 100644
--- a/drivers/media/video/gspca/gspca.c
+++ b/drivers/media/video/gspca/gspca.c
@@ -320,12 +320,6 @@ static void fill_frame(struct gspca_dev *gspca_dev,
for (i = 0; i < urb->number_of_packets; i++) {
/* check the packet status and length */
- len = urb->iso_frame_desc[i].actual_length;
- if (len == 0) {
- if (gspca_dev->empty_packet == 0)
- gspca_dev->empty_packet = 1;
- continue;
- }
st = urb->iso_frame_desc[i].status;
if (st) {
err("ISOC data error: [%d] len=%d, status=%d",
@@ -333,6 +327,12 @@ static void fill_frame(struct gspca_dev *gspca_dev,
gspca_dev->last_packet_type = DISCARD_PACKET;
continue;
}
+ len = urb->iso_frame_desc[i].actual_length;
+ if (len == 0) {
+ if (gspca_dev->empty_packet == 0)
+ gspca_dev->empty_packet = 1;
+ continue;
+ }
/* let the packet be analyzed by the subdriver */
PDEBUG(D_PACK, "packet [%d] o:%d l:%d",