linux/drivers/media
Mauro Carvalho Chehab 27b76178c4 cx24116: fix a buffer overflow when checking userspace params
commit 1fa2337a31 upstream.

The maximum size for a DiSEqC command is 6, according to the
userspace API. However, the code allows to write up much more values:
	drivers/media/dvb-frontends/cx24116.c:983 cx24116_send_diseqc_msg() error: buffer overflow 'd->msg' 6 <= 23

Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2015-08-03 09:29:03 -07:00
..
common [media] saa7146: embed video_device 2015-04-02 23:29:01 -03:00
dvb-core Merge branch 'drm-next-merged' of git://people.freedesktop.org/~airlied/linux into v4l_for_linus 2015-04-21 09:44:55 -03:00
dvb-frontends cx24116: fix a buffer overflow when checking userspace params 2015-08-03 09:29:03 -07:00
firewire [media] firewire: Deletion of an unnecessary check before the function call "dvb_unregister_device" 2014-11-25 13:30:31 -02:00
i2c Revert "[media] Add device tree support to adp1653 flash driver" 2015-04-09 07:33:45 -03:00
mmc [media] siano: register media controller earlier 2015-02-26 09:10:39 -03:00
pci saa7164: fix querycap warning 2015-08-03 09:29:02 -07:00
platform media fixes for v4.1-rc3 2015-05-05 08:42:06 -07:00
radio [media] media: radio-si4713: improve usage of gpiod API 2015-04-08 06:40:33 -03:00
rc Merge branch 'drm-next-merged' of git://people.freedesktop.org/~airlied/linux into v4l_for_linus 2015-04-21 09:44:55 -03:00
tuners Merge branch 'drm-next-merged' of git://people.freedesktop.org/~airlied/linux into v4l_for_linus 2015-04-21 09:44:55 -03:00
usb rc-core: fix dib0700 scancode generation for RC5 2015-08-03 09:29:02 -07:00
v4l2-core vb2: Don't WARN when v4l2_buffer.bytesused is 0 for multiplanar buffers 2015-08-03 09:29:02 -07:00
Kconfig Kconfig: disable Media Controller for DVB 2015-06-17 20:53:36 -10:00
Makefile [media] bq/c-qcam, w9966, pms: move to staging in preparation for removal 2014-12-16 23:21:44 -02:00
media-device.c [media] media: Use strlcpy instead of custom code 2014-09-21 20:27:08 -03:00
media-devnode.c [media] media-devnode: just return 0 instead of using a var 2014-09-03 17:59:28 -03:00
media-entity.c [media] media: Fix a compiler warning in media_entity_pipeline_start() 2014-11-03 19:09:13 -02:00