linux/drivers/media
Wei Chen 858e97d795 media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
In az6027_i2c_xfer, msg is controlled by user. When msg[i].buf is null,
commit 0ed554fd76 ("media: dvb-usb: az6027: fix null-ptr-deref in
az6027_i2c_xfer()") fix the null-ptr-deref bug when msg[i].addr is 0x99.
However, null-ptr-deref also happens when msg[i].addr is 0xd0 and 0xc0.
We add check on msg[i].len to prevent null-ptr-deref.

Link: https://lore.kernel.org/linux-media/20230310165604.3093483-1-harperchen1110@gmail.com
Signed-off-by: Wei Chen <harperchen1110@gmail.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
2023-05-14 06:29:42 +01:00
..
cec media: cec: core: not all messages were passed on when monitoring 2023-04-15 07:48:39 +01:00
common media: common: saa7146: add support for missing .vidioc_try_fmt_vbi_cap 2023-04-15 08:55:16 +01:00
dvb-core media: dvb_demux: fix a bug for the continuity counter 2023-05-13 08:20:01 +01:00
dvb-frontends media: zd1301_demod: Convert to platform remove callback returning void 2023-04-11 16:59:14 +02:00
firewire
i2c media: ov5670: Fix probe on ACPI 2023-04-25 08:30:18 +01:00
mc media: mc-device: remove unnecessary __must_check 2023-04-11 18:54:01 +02:00
mmc
pci media: netup_unidvb: fix use-after-free at del_timer() 2023-05-14 06:28:57 +01:00
platform media: platform: mtk-mdp3: work around unused-variable warning 2023-05-08 12:11:25 +01:00
radio USB / Thunderbolt changes for 6.4-rc1 2023-04-27 11:42:11 -07:00
rc Driver core changes for 6.4-rc1 2023-04-27 11:53:57 -07:00
spi
test-drivers media: Zero-initialize all structures passed to subdev pad operations 2023-04-12 09:46:06 +02:00
tuners media: it913x: Convert to platform remove callback returning void 2023-04-11 16:59:21 +02:00
usb media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() 2023-05-14 06:29:42 +01:00
v4l2-core media: Add ABGR64_12 video format 2023-04-15 09:11:30 +01:00
Kconfig media: Kconfig: Make DVB_CORE=m possible when MEDIA_SUPPORT=y 2022-12-07 17:58:46 +01:00
Makefile