linux/drivers/media/usb
Alyssa Milburn 044c45f32e dw2102: limit messages to buffer size
commit 950e252cb4 upstream.

Otherwise the i2c transfer functions can read or write beyond the end of
stack or heap buffers.

Signed-off-by: Alyssa Milburn <amilburn@zall.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
[bwh: Backported to 3.16:
 - Use obuf instead of state->data
 - Adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
History 2017-08-26 02:14:35 +01:00
..
au0828 [media] sound: simplify au0828 quirk table 2015-01-05 13:48:32 +00:00
b2c2 [media] drivers: media: usb: b2c2: use usb_*_coherent() instead of pci_*_consistent() in flexcop-usb.c 2013-10-17 11:26:41 -03:00
cpia2 [media] media: Change variable type to bool 2013-10-17 11:24:35 -03:00
cx231xx cx231xx-audio: fix NULL-deref at probe 2017-08-26 02:14:30 +01:00
dvb-usb dw2102: limit messages to buffer size 2017-08-26 02:14:35 +01:00
dvb-usb-v2 dvb-usb-v2: avoid use-after-free 2017-06-05 21:17:22 +01:00
em28xx em28xx-i2c: rt_mutex_trylock() returns zero on failure 2016-11-20 01:16:39 +00:00
gspca gspca: konica: add missing endpoint sanity check 2017-08-26 02:14:28 +01:00
hdpvr [media] hdpvr: fix two audio bugs 2014-07-04 15:13:02 -03:00
pvrusb2 pvrusb2: reduce stack usage pvr2_eeprom_analyze() 2017-08-26 02:14:23 +01:00
pwc pwc: Add USB id for Philips Spc880nc webcam 2016-05-01 00:05:45 +02:00
s2255 [media] s2255drv: fix payload size for JPG, MJPEG 2014-12-10 17:49:37 +00:00
siano siano: make it work again with CONFIG_VMAP_STACK 2017-03-16 02:27:13 +00:00
stk1160 [media] stk1160: Make sure current buffer is released 2015-05-05 11:09:42 +01:00
stkwebcam [media] Add HCL T12Rg-H to STK webcam upside-down table 2013-09-26 07:15:49 -03:00
tlg2300 [media] Convert to snd_card_new() with a device pointer 2014-02-14 08:14:09 +01:00
tm6000 [media] v4l: subdev: Move [gs]_std operation to video ops 2014-05-24 17:11:26 -03:00
ttusb-budget [media] ttusb-budget: fix memory leak in ttusb_probe() 2013-06-21 15:06:51 -03:00
ttusb-dec [media] ttusb-dec: buffer overflow in ioctl 2014-11-20 09:55:20 +00:00
usbtv [media] vb2: stop_streaming should return void 2014-04-23 10:12:51 -03:00
usbvision usbvision: fix NULL-deref at probe 2017-08-26 02:14:29 +01:00
uvc uvcvideo: Fix empty packet statistic 2017-08-26 02:14:30 +01:00
zr364xx zr364xx: enforce minimum size when reading header 2017-08-26 02:14:33 +01:00
Kconfig [media] sn9c102: prepare for removal by moving it to staging 2013-12-20 13:41:36 -02:00
Makefile [media] sn9c102: prepare for removal by moving it to staging 2013-12-20 13:41:36 -02:00