kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-16 22:39:48 +00:00
Code Issues Releases Packages Activity
linux/drivers/media
History
Mauro Carvalho Chehab 14b5741806 [media] cx24117: fix a buffer overflow when checking userspace params 
commit 82e3b88b67 upstream.

The maximum size for a DiSEqC command is 6, according to the
userspace API. However, the code allows to write up much more values:
	drivers/media/dvb-frontends/cx24116.c:983 cx24116_send_diseqc_msg() error: buffer overflow 'd->msg' 6 <= 23

Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
History 2015-07-09 14:35:58 +01:00
..
common [media] siano: add support for PCTV 77e 2014-11-17 14:11:49 +00:00
dvb-core media: af9035: new IDs: add support for PCTV 78e and PCTV 79e 2014-10-05 13:41:10 -07:00
dvb-frontends [media] cx24117: fix a buffer overflow when checking userspace params 2015-07-09 14:35:58 +01:00
firewire firewire: introduce fw_driver.probe and .remove methods 2013-06-09 18:15:00 +02:00
i2c [media] smiapp-pll: Correct clock debug prints 2015-01-05 13:33:41 +00:00
mmc [media] siano: get rid of CammelCase from smscoreapi.h 2013-03-21 10:03:16 -03:00
parport [media] media: parport: Fix format string mismatch in bw-qcam.c 2014-05-23 12:18:53 -03:00
pci media: cx18: fix kernel oops with tda8290 tuner 2014-10-05 13:41:10 -07:00
platform [media] media: s5p-mfc: fix mmap support for 64bit arch 2015-04-27 16:16:33 +01:00
radio [media] si4713: fix Kconfig dependencies 2014-03-28 18:06:55 -03:00
rc [media] rc: img-ir: fix error in parameters passed to irq_free() 2015-05-05 11:09:53 +01:00
tuners [media] m88ts2022: fix 32bit overflow on filter calc 2014-11-17 14:11:50 +00:00
usb [media] stk1160: Make sure current buffer is released 2015-05-05 11:09:42 +01:00
v4l2-core [media] vb2: fix vb2_thread_stop race conditions 2015-02-04 10:57:41 +00:00
Kconfig [media] subdev autoselect only works if I2C and I2C_MUX is selected 2013-12-21 06:03:06 -02:00
Makefile [media] move i2c files into drivers/media/i2c 2012-09-06 18:42:54 -03:00
media-device.c media: media-device: Remove duplicated memset() in media_enum_entities() 2014-09-17 09:21:49 -07:00
media-devnode.c [media] media: Use a better owner for the media device 2014-05-13 13:39:00 -03:00
media-entity.c [media] media: Check for active links on pads with MEDIA_PAD_FL_MUST_CONNECT flag 2013-12-04 15:03:45 -02:00