linux/drivers/media
Pavel Skripkin 82d7e9597e media: dvb-usb: fix wrong definition
commit c680ed46e4 upstream.

syzbot reported WARNING in vmalloc. The problem
was in zero size passed to vmalloc.

The root case was in wrong cxusb_bluebird_lgz201_properties
definition. adapter array has only 1 entry, but num_adapters was
2.

Call Trace:
 __vmalloc_node mm/vmalloc.c:2963 [inline]
 vmalloc+0x67/0x80 mm/vmalloc.c:2996
 dvb_dmx_init+0xe4/0xb90 drivers/media/dvb-core/dvb_demux.c:1251
 dvb_usb_adapter_dvb_init+0x564/0x860 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:184
 dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:86 [inline]
 dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:184 [inline]
 dvb_usb_device_init.cold+0xc94/0x146e drivers/media/usb/dvb-usb/dvb-usb-init.c:308
 cxusb_probe+0x159/0x5e0 drivers/media/usb/dvb-usb/cxusb.c:1634

Fixes: 4d43e13f72 ("V4L/DVB (4643): Multi-input patch for DVB-USB device")
Cc: stable@vger.kernel.org
Reported-by: syzbot+7336195c02c1bd2f64e1@syzkaller.appspotmail.com
Signed-off-by: Pavel Skripkin <paskripkin@gmail.com>
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2021-07-14 17:06:04 +02:00
..
cec media: cec/core: clarify rx-arb-lost usage message 2021-04-06 16:08:38 +02:00
common media: flexcop: avoid -Wempty-body warning 2021-04-09 13:05:01 +02:00
dvb-core media: dvbdev: Fix memory leak in dvb_media_device_free() 2021-03-22 23:36:39 +01:00
dvb-frontends media: dvb: Add check on sp8870_readreg return 2021-05-13 18:32:41 +02:00
firewire module: remove never implemented MODULE_SUPPORTED_DEVICE 2021-03-17 13:16:18 -07:00
i2c media: adv7842: support 1 block EDIDs, fix clearing EDID 2021-04-09 13:18:05 +02:00
mc media: entity: Add lockdep check to media graph walk 2021-04-06 14:35:14 +02:00
mmc media updates for v5.8-rc1 2020-06-03 20:59:38 -07:00
pci media updates for v5.13-rc1 2021-04-28 09:24:36 -07:00
platform Revert "media: rcar_drif: fix a memory disclosure" 2021-05-13 17:29:55 +02:00
radio media: radio-si476x: rectify spelling and grammar 2021-03-22 11:58:42 +01:00
rc media updates for v5.13-rc1 2021-04-28 09:24:36 -07:00
spi media: use getter/setter functions 2021-03-11 11:59:42 +01:00
test-drivers media: vivid: add read-only int32 control 2021-04-06 16:04:24 +02:00
tuners media: m88rs6000t: avoid potential out-of-bounds reads on arrays 2021-03-22 17:41:39 +01:00
usb media: dvb-usb: fix wrong definition 2021-07-14 17:06:04 +02:00
v4l2-core drm for 5.13-rc1 2021-04-28 10:01:40 -07:00
Kconfig media: Correct 'so' 2021-03-22 11:52:09 +01:00
Makefile media: media/test_drivers: rename to test-drivers 2020-04-16 10:38:31 +02:00