kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-18 19:12:56 +00:00
Code Issues Releases Packages Activity
linux/drivers/media/platform
History
Vikash Garodia 074aed64f3 media: venus: hfi: add checks to perform sanity on queue pointers 
commit 5e538fce33 upstream.

Read and write pointers are used to track the packet index in the memory
shared between video driver and firmware. There is a possibility of OOB
access if the read or write pointer goes beyond the queue memory size.
Add checks for the read and write pointer to avoid OOB access.

Cc: stable@vger.kernel.org
Fixes: d96d3f30c0 ("[media] media: venus: hfi: add Venus HFI files")
Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com>
Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2023-11-28 17:19:54 +00:00
..
allegro-dvt media: Explicitly include correct DT includes 2023-07-19 12:57:51 +02:00
amlogic media: ge2d: Convert to platform remove callback returning void 2023-04-11 16:59:14 +02:00
amphion media: amphion: handle firmware debug message 2023-11-20 11:59:32 +01:00
aspeed media: aspeed: Fix memory overwrite if timing is 1600x900 2023-07-19 12:57:51 +02:00
atmel media: v4l: async: Set v4l2_device and subdev in async notifier init 2023-08-10 07:58:32 +02:00
cadence media: cadence: csi2rx: Unregister v4l2 async notifier 2023-11-20 11:59:32 +01:00
chips-media media: coda: Remove duplicated include 2023-08-14 20:27:58 +02:00
intel media: pxa_camera: Fix an error handling path in pxa_camera_probe() 2023-10-02 10:02:53 +02:00
marvell media: v4l: Use correct dependency for camera sensor drivers 2023-09-14 12:38:17 +02:00
mediatek media: platform: mtk-mdp3: fix uninitialized variable in mdp_path_config() 2023-11-20 11:59:33 +01:00
microchip media: v4l: async: Set v4l2_device and subdev in async notifier init 2023-08-10 07:58:32 +02:00
nvidia media: Explicitly include correct DT includes 2023-07-19 12:57:51 +02:00
nxp media: imx-jpeg: notify source chagne event when the first picture parsed 2023-11-20 11:59:33 +01:00
qcom media: venus: hfi: add checks to perform sanity on queue pointers 2023-11-28 17:19:54 +00:00
renesas media: rcar-csi2: Add support for C-PHY on R-Car V4H 2023-08-10 07:58:39 +02:00
rockchip media: v4l: async: Set v4l2_device and subdev in async notifier init 2023-08-10 07:58:32 +02:00
samsung media: s3c-camif: Avoid inappropriate kfree() 2023-11-20 11:59:32 +01:00
st media: stm32: dcmi: only call s_stream on the source subdev 2023-08-10 07:58:36 +02:00
sunxi media: v4l: async: Set v4l2_device and subdev in async notifier init 2023-08-10 07:58:32 +02:00
ti media: platform: ti: fix the return value handle for platform_get_irq() 2023-08-14 20:27:55 +02:00
verisilicon media: verisilicon: Fixes clock list for rk3588 av1 decoder 2023-11-20 11:59:33 +01:00
via media: via: Use correct dependency for camera sensor drivers 2023-09-14 12:38:17 +02:00
xilinx media: xilinx-vipp: Look for entities also in waiting_list 2023-10-11 15:26:16 +02:00
Kconfig media: atmel: move microchip_csi2dc to dedicated microchip platform 2022-11-25 07:43:17 +00:00
m2m-deinterlace.c media: m2m-deinterlace: Convert to platform remove callback returning void 2023-04-11 16:59:15 +02:00
Makefile media: atmel: move microchip_csi2dc to dedicated microchip platform 2022-11-25 07:43:17 +00:00
video-mux.c media: v4l: async: Set v4l2_device and subdev in async notifier init 2023-08-10 07:58:32 +02:00