Hangyu Hua ac828e2416 media: dvb_vb2: fix possible out of bound access ...

commit 37238699073e7e93f05517e529661151173cd458 upstream.

vb2_core_qbuf and vb2_core_querybuf don't check the range of b->index
controlled by the user.

Fix this by adding range checking code before using them.

Fixes: 57868acc369a ("media: videobuf2: Add new uAPI for DVB streaming I/O")
Signed-off-by: Hangyu Hua <hbh25y@gmail.com>
Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-10-05 10:38:40 +02:00

..

cec

media: cec-adap.c: fix is_configuring state

2022-06-09 10:20:55 +02:00

common

media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()

2022-01-27 10:54:16 +01:00

dvb-core

media: dvb_vb2: fix possible out of bound access

2022-10-05 10:38:40 +02:00

dvb-frontends

media: dib8000: Fix a memleak in dib8000_init()

2022-01-27 10:53:54 +01:00

firewire

media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()

2021-11-06 14:10:09 +01:00

i2c

media: ov7670: remove ov7670_power_off from ov7670_remove

2022-06-09 10:21:10 +02:00

mc

media: Fix Media Controller API config checks

2021-07-14 16:55:56 +02:00

mmc

media updates for v5.8-rc1

2020-06-03 20:59:38 -07:00

pci

media: tw686x: Fix memory leak in tw686x_video_init

2022-08-21 15:15:42 +02:00

platform

media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment

2022-08-21 15:15:46 +02:00

radio

media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()

2022-01-27 10:53:51 +01:00

rc

media: mceusb: Use new usb_control_msg_*() routines

2022-09-08 11:11:39 +02:00

spi

media: cxd2880-spi: Fix a null pointer dereference on error handling path

2021-11-18 14:04:04 +01:00

test-drivers

media: vim2m: initialize the media device earlier

2022-05-30 09:33:23 +02:00

tuners

media: msi001: fix possible null-ptr-deref in msi001_probe()

2022-01-27 10:53:56 +01:00

usb

media: flexcop-usb: fix endpoint type check

2022-09-28 11:10:26 +02:00

v4l2-core

media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set

2022-08-21 15:15:41 +02:00

Kconfig

media: correct MEDIA_TEST_SUPPORT help text

2022-01-27 10:54:29 +01:00

Makefile

media: media/test_drivers: rename to test-drivers

2020-04-16 10:38:31 +02:00