linux/drivers/media
Colin Ian King d539c0e5a7 media: cx231xx: fix potential sign-extension overflow on large shift
commit 32ae592036 upstream.

Shifting the u8 value[3] by an int can lead to sign-extension
overflow. For example, if value[3] is 0xff and the shift is 24 then it
is promoted to int and then the top bit is sign-extended so that all
upper 32 bits are set.  Fix this by casting value[3] to a u32 before
the shift.

Detected by CoverityScan, CID#1016522 ("Unintended sign extension")

Fixes: e0d3bafd02 ("V4L/DVB (10954): Add cx231xx USB driver")

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
History 2019-02-11 17:53:30 +00:00
..
common [media] siano: add support for PCTV 77e 2014-11-17 14:11:49 +00:00
dvb-core media: dvb_frontend: fix locking issues at dvb_frontend_get_event() 2018-11-20 18:04:47 +00:00
dvb-frontends drxd_hard: fix bad alignments 2018-11-20 18:04:45 +00:00
firewire firewire: introduce fw_driver.probe and .remove methods 2013-06-09 18:15:00 +02:00
i2c media: tvp5150: fix width alignment during set_selection() 2019-02-11 17:53:20 +00:00
mmc [media] siano: get rid of CammelCase from smscoreapi.h 2013-03-21 10:03:16 -03:00
parport [media] media: parport: Fix format string mismatch in bw-qcam.c 2014-05-23 12:18:53 -03:00
pci media: pci: cx23885: handle adding to list failure 2019-02-11 17:53:22 +00:00
platform media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt() 2018-12-16 22:08:09 +00:00
radio [media] si4713: fix Kconfig dependencies 2014-03-28 18:06:55 -03:00
rc ir-core: fix gcc-7 warning on bool arithmetic 2018-11-20 18:06:02 +00:00
tuners xc2028: Fix use-after-free bug properly 2017-02-23 03:54:39 +00:00
usb media: cx231xx: fix potential sign-extension overflow on large shift 2019-02-11 17:53:30 +00:00
v4l2-core media: v4l: event: Add subscription to list before calling "add" operation 2019-02-11 17:53:16 +00:00
Kconfig [media] subdev autoselect only works if I2C and I2C_MUX is selected 2013-12-21 06:03:06 -02:00
Makefile [media] move i2c files into drivers/media/i2c 2012-09-06 18:42:54 -03:00
media-device.c media: media-device: Remove duplicated memset() in media_enum_entities() 2014-09-17 09:21:49 -07:00
media-devnode.c [media] media: Use a better owner for the media device 2014-05-13 13:39:00 -03:00
media-entity.c [media] media: Check for active links on pads with MEDIA_PAD_FL_MUST_CONNECT flag 2013-12-04 15:03:45 -02:00