iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/media/usb/dvb-usb-v2
History
Zhang Shurong b97719a669 media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer 
In gl861_i2c_master_xfer, msg is controlled by user. When msg[i].buf
is null and msg[i].len is zero, former checks on msg[i].buf would be
passed. Malicious data finally reach gl861_i2c_master_xfer. If accessing
msg[i].buf[0] without sanity check, null ptr deref would happen.
We add check on msg[i].len to prevent crash.

Similar commit:
commit 0ed554fd769a
("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()")

Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
2023-07-19 12:57:50 +02:00
..
af9015.c
media: usb: dvb-usb-v2: af9015.c: return 0 instead of 'ret'.
2023-02-08 08:31:05 +01:00
af9015.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
af9035.c
media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
2023-07-19 12:57:48 +02:00
af9035.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 1
2019-05-21 11:28:39 +02:00
anysee.c
media: anysee: fix null-ptr-deref in anysee_master_xfer
2023-07-19 12:57:50 +02:00
anysee.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
au6610.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
au6610.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
az6007.c
media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
2023-07-19 12:57:50 +02:00
ce6230.c
media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
2023-05-14 06:30:01 +01:00
ce6230.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
dvb_usb_common.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 1
2019-05-21 11:28:39 +02:00
dvb_usb_core.c
media: rtl28xxu: fix idle handling
2019-10-07 07:42:43 -03:00
dvb_usb_urb.c
Linux 5.2-rc2
2019-05-28 11:21:51 -04:00
dvb_usb.h
media: media/usb: fix kernel-doc header issues
2021-03-22 12:51:50 +01:00
dvbsky.c
media: dvbsky: add support for MyGica T230C2_LITE and T230A
2021-07-12 09:16:29 +02:00
ec168.c
media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
2023-05-14 06:29:59 +01:00
ec168.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
gl861.c
media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
2023-07-19 12:57:50 +02:00
Kconfig
media: media/*/Kconfig: sort entries
2022-03-18 05:58:35 +01:00
lmedm04.c
media: lmedm04: don't ignore errors when setting a filter
2021-11-29 13:23:14 +01:00
lmedm04.h
media: docs: move driver-specific info to driver-api
2020-04-14 10:36:18 +02:00
Makefile
…
mxl111sf-demod.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf-demod.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf-gpio.c
media: Use fallthrough pseudo-keyword
2020-08-29 08:35:27 +02:00
mxl111sf-gpio.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf-i2c.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf-i2c.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf-phy.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf-phy.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf-reg.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf-tuner.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf-tuner.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
mxl111sf.c
media: mxl111sf: change mutex_init() location
2021-09-30 10:08:01 +02:00
mxl111sf.h
media: docs: move driver-specific info to driver-api
2020-04-14 10:36:18 +02:00
rtl28xxu.c
media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
2023-05-14 06:30:03 +01:00
rtl28xxu.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 1
2019-05-21 11:28:39 +02:00
usb_urb.c
media: dvb-usb-v2: Fix incorrect use of transfer_flags URB_FREE_BUFFER
2018-12-03 13:23:24 -05:00
zd1301.c
media: usb: dvb-usb-v2: zd1301: fix missing platform_device_unregister()
2020-11-17 06:57:29 +01:00