kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-20 19:23:40 +00:00
Code Issues Releases Packages Activity
linux/drivers/media/usb
History
Mauro Carvalho Chehab feef460321 media: dw2102: fix a potential buffer overflow 
commit 1c73d0b29d upstream.

As pointed by smatch:
	 drivers/media/usb/dvb-usb/dw2102.c:802 su3000_i2c_transfer() error: __builtin_memcpy() '&state->data[4]' too small (64 vs 67)

That seemss to be due to a wrong copy-and-paste.

Fixes: 0e148a522b ("media: dw2102: Don't translate i2c read into write")

Reported-by: Hans Verkuil <hverkuil@xs4all.nl>
Reviewed-by: Hans Verkuil <hverkuil@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2024-07-18 13:07:34 +02:00
..
airspy media: rtl2832_sdr/vivid/airspy/hackrf/msi2500: drop memset of fmt.sdr.reserved 2021-05-19 09:51:39 +02:00
as102 treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 118 2019-05-24 17:39:02 +02:00
au0828 media: au0828: fix a NULL vs IS_ERR() check 2021-06-02 13:30:28 +02:00
b2c2 media: flexcop-usb: fix sanity check of bNumEndpoints 2024-06-16 13:39:44 +02:00
cpia2 media: cpia2: fix control-message timeouts 2022-01-27 11:02:55 +01:00
cx231xx media: cx231xx: fix a memleak in cx231xx_init_isoc 2024-01-25 14:52:42 -08:00
dvb-usb media: dw2102: fix a potential buffer overflow 2024-07-18 13:07:34 +02:00
dvb-usb-v2 media: dvb-usb-v2: af9035: fix missing unlock 2023-11-20 11:08:27 +01:00
em28xx media: em28xx: annotate unchecked call to media_device_register() 2024-03-26 18:21:26 -04:00
go7007 media: go7007: fix a memleak in go7007_load_encoder 2024-03-26 18:21:30 -04:00
gspca media: gspca: cpia1: shift-out-of-bounds in set_flicker 2023-11-28 16:56:20 +00:00
hackrf media: rtl2832_sdr/vivid/airspy/hackrf/msi2500: drop memset of fmt.sdr.reserved 2021-05-19 09:51:39 +02:00
hdpvr media: hdpvr: fix error value returns in hdpvr_read 2022-08-17 14:23:23 +02:00
msi2500 media: rtl2832_sdr/vivid/airspy/hackrf/msi2500: drop memset of fmt.sdr.reserved 2021-05-19 09:51:39 +02:00
pvrusb2 media: pvrusb2: fix uaf in pvr2_context_set_notify 2024-03-26 18:21:30 -04:00
pwc treewide: remove editor modelines and cruft 2021-05-07 00:26:34 -07:00
s2255 media: s2255: Use refcount_t instead of atomic_t for num_channels 2024-07-18 13:07:28 +02:00
siano drivers: usb: smsusb: fix error handling code in smsusb_init_device 2023-09-19 12:22:43 +02:00
stk1160 media: stk1160: fix bounds checking in stk1160_copy_video() 2024-06-16 13:39:43 +02:00
stkwebcam media: stkwebcam: fix memory leak in stk_camera_probe 2021-07-22 14:01:55 +02:00
tm6000 media: tm6000: Avoid card name truncation 2021-11-18 19:16:29 +01:00
ttusb-budget media: dvb-ttusb-budget: cleanup printk logic 2020-09-03 11:15:47 +02:00
ttusb-dec media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() 2023-06-09 10:32:24 +02:00
usbtv media updates for v5.13-rc1 2021-04-28 09:24:36 -07:00
uvc media: uvcvideo: Don't expose unsupported formats to userspace 2023-06-09 10:32:27 +02:00
zr364xx media: zr364xx: fix memory leak in zr364xx_start_readpipe 2021-06-02 13:35:15 +02:00
Kconfig media: move ttpci-eeprom to common 2021-06-02 11:16:15 +02:00
Makefile media: move CEC USB drivers to a separate directory 2020-04-15 12:06:40 +02:00