iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
858e97d795
linux/drivers/media/usb
History
Wei Chen 858e97d795 media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() 
In az6027_i2c_xfer, msg is controlled by user. When msg[i].buf is null,
commit 0ed554fd76 ("media: dvb-usb: az6027: fix null-ptr-deref in
az6027_i2c_xfer()") fix the null-ptr-deref bug when msg[i].addr is 0x99.
However, null-ptr-deref also happens when msg[i].addr is 0xd0 and 0xc0.
We add check on msg[i].len to prevent null-ptr-deref.

Link: https://lore.kernel.org/linux-media/20230310165604.3093483-1-harperchen1110@gmail.com
Signed-off-by: Wei Chen <harperchen1110@gmail.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
2023-05-14 06:29:42 +01:00
..
airspy media: airspy: fix memory leak in airspy probe 2022-08-30 07:31:42 +02:00
as102
au0828 media: mc-device: remove unnecessary __must_check 2023-04-11 18:54:01 +02:00
b2c2 media: flexcop-usb: use usb_endpoint_maxp() 2022-09-26 10:59:25 +02:00
cx231xx media: avoid use of 'videobuf' 2022-08-29 16:27:18 +02:00
dvb-usb media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() 2023-05-14 06:29:42 +01:00
dvb-usb-v2 media: usb: dvb-usb-v2: af9015.c: return 0 instead of 'ret'. 2023-02-08 08:31:05 +01:00
em28xx media: dvb-frontends: a8293: fix LNB powerup failure in PCTV 461e 2022-11-25 09:55:55 +00:00
go7007 media: go7007: don't modify q->streaming 2023-02-06 09:01:05 +01:00
gspca media: gspca: Fix typo 'the the' in comment 2022-08-29 15:32:14 +02:00
hackrf media: Kconfig: cleanup VIDEO_DEV dependencies 2022-03-18 05:58:35 +01:00
hdpvr media: hdpvr: fix error value returns in hdpvr_read 2022-06-27 09:02:50 +01:00
msi2500 media: usb/msi2500: fix repeated words in comments 2022-09-24 08:46:38 +02:00
pvrusb2 media: pvrusb2: fix DVB_CORE dependency 2023-05-13 08:19:54 +01:00
pwc media: usb: pwc-uncompress: Use flex array destination for memcpy() 2022-12-07 17:58:46 +01:00
s2255 treewide: Convert del_timer*() to timer_shutdown*() 2022-12-25 13:38:09 -08:00
siano media: usb: siano: Fix use after free bugs caused by do_submit_urb 2023-02-08 09:02:42 +01:00
stk1160 media: stk1160: use dma_alloc_noncontiguous API 2022-03-07 11:01:22 +01:00
ttusb-budget
ttusb-dec media: ttusb-dec: avoid release of non-acquired mutex 2021-09-30 10:07:40 +02:00
usbtv usbtv: usbtv_set_regs: the pipe is output 2023-04-11 17:10:10 +02:00
uvc usb: uvc: make uvc_format_desc table const 2023-01-31 09:40:42 +01:00
Kconfig media: tm6000: deprecate this driver 2022-08-29 16:43:00 +02:00
Makefile media: tm6000: deprecate this driver 2022-08-29 16:43:00 +02:00