linux/drivers/staging/media
Dan Carpenter 7b065c554c media: atomisp2: Array underflow in atomisp_enum_input()
The problem here is this code from atomisp_enum_input():

   581          int index = input->index;
   582
   583          if (index >= isp->input_cnt)
   584                  return -EINVAL;
   585
   586          if (!isp->inputs[index].camera)
   587                  return -EINVAL;

"input->index" is a u32 which comes from the ioctl.  We want negative
values of "index" to be counted as -EINVAL but they aren't.  I've fixed
this by changing the type of "isp->input_cnt" to unsigned int.

Fixes: a49d25364d ("staging/atomisp: Add support for the Intel IPU v2")

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
2017-07-26 08:24:22 -04:00
..
atomisp media: atomisp2: Array underflow in atomisp_enum_input() 2017-07-26 08:24:22 -04:00
bcm2048 [media] media: bcm2048: fix several macros 2017-04-10 14:44:08 -03:00
cxd2099 media: staging: cxd2099: Activate cxd2099 buffer mode 2017-06-26 08:19:13 -03:00
davinci_vpfe Staging: media: Unmap and release region obtained by ioremap_nocache 2017-03-21 08:52:29 +01:00
imx [media] media: imx: Drop warning upon multiple S_STREAM disable calls 2017-06-20 08:12:20 -03:00
lirc [media] staging: remove todo and replace with lirc_zilog todo 2017-06-06 09:18:08 -03:00
omap4iss [media] staging: media: omap4iss: Replace a bit shift by a use of BIT 2017-04-18 12:13:11 -03:00
Kconfig [media] media: Add i.MX media core driver 2017-06-20 07:30:38 -03:00
Makefile [media] media: Add i.MX media core driver 2017-06-20 07:30:38 -03:00