capture-isp: Fix allocations for unpins_list

When allocating a memory for a list of pinned buffers, capture-isp wrongly
uses size of a pointer to "unpin" element instead of a size of element
itself. As a result, allocation size is too small to fit all possible
unpin buffer elements for a longer ISP capture requests, resulting in
out-of-bound array access.

Use full capture element size when calculating a total size of unpins_list
allocation.

Bug 3272255

Change-Id: I9fc96787c84d18e9416ce374540374c99bb5c7fc
Reviewed-on: https://git-master.nvidia.com/r/c/linux-nvidia/+/2495613
Signed-off-by: Kirill Artamonov <kartamonov@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/c/linux-nvidia/+/2545371
Reviewed-by: svcacv <svcacv@nvidia.com>
Reviewed-by: Igor Mitsyanko <imitsyanko@nvidia.com>
Reviewed-by: Semi Malinen <smalinen@nvidia.com>
Reviewed-by: Pekka Pessi <ppessi@nvidia.com>
Reviewed-by: Mika Liljeberg <mliljeberg@nvidia.com>
Reviewed-by: mobile promotions <svcmobile_promotions@nvidia.com>
Tested-by: Igor Mitsyanko <imitsyanko@nvidia.com>
Tested-by: mobile promotions <svcmobile_promotions@nvidia.com>
GVS: Gerrit_Virtual_Submit

0 files changed, 0 insertions, 0 deletions