linux/drivers/media/usb
Ludwig Disterhof ef9b3c2240 media: usbtv: Lock resolution while streaming
commit 7e40e0bb77 upstream.

When an program is streaming (ffplay) and another program (qv4l2)
changes the TV standard from NTSC to PAL, the kernel crashes due to trying
to copy to unmapped memory.

Changing from NTSC to PAL increases the resolution in the usbtv struct,
but the video plane buffer isn't adjusted, so it overflows.

Fixes: 0e0fe3958f ("[media] usbtv: Add support for PAL video source")
Cc: stable@vger.kernel.org
Signed-off-by: Ludwig Disterhof <ludwig@disterhof.eu>
Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
[hverkuil: call vb2_is_busy instead of vb2_is_streaming]
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2025-08-28 16:26:08 +02:00
..
airspy media: airspy: fix memory leak in airspy probe 2022-08-30 07:31:42 +02:00
as102 treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 118 2019-05-24 17:39:02 +02:00
au0828 media: mc: convert pipeline funcs to take media_pad 2022-09-24 09:22:30 +02:00
b2c2 media: flexcop-usb: fix sanity check of bNumEndpoints 2024-06-12 11:03:47 +02:00
cx231xx media: cx231xx: set device_caps for 417 2025-06-04 14:40:09 +02:00
dvb-usb media: cxusb: no longer judge rbuf when the write fails 2025-06-27 11:07:27 +01:00
dvb-usb-v2 media: lmedm04: Handle errors for lme2510_int_read 2025-02-21 13:49:17 +01:00
em28xx media: em28xx: annotate unchecked call to media_device_register() 2024-03-26 18:20:46 -04:00
go7007 media: go7007: fix a memleak in go7007_load_encoder 2024-03-26 18:20:51 -04:00
gspca media: gspca: Add bounds checking to firmware parser 2025-08-28 16:26:08 +02:00
hackrf media: Kconfig: cleanup VIDEO_DEV dependencies 2022-03-18 05:58:35 +01:00
hdpvr media: usb: hdpvr: disable zero-length read messages 2025-08-28 16:26:01 +02:00
msi2500 media: usb/msi2500: fix repeated words in comments 2022-09-24 08:46:38 +02:00
pvrusb2 media: pvrusb2: fix uaf in pvr2_context_set_notify 2024-03-26 18:20:51 -04:00
pwc media: Kconfig: cleanup VIDEO_DEV dependencies 2022-03-18 05:58:35 +01:00
s2255 media: s2255: Use refcount_t instead of atomic_t for num_channels 2024-07-11 12:47:08 +02:00
siano drivers: usb: smsusb: fix error handling code in smsusb_init_device 2023-09-13 09:42:50 +02:00
stk1160 media: stk1160: fix bounds checking in stk1160_copy_video() 2024-06-12 11:03:47 +02:00
ttusb-budget media: dvb-ttusb-budget: cleanup printk logic 2020-09-03 11:15:47 +02:00
ttusb-dec media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() 2023-06-09 10:34:12 +02:00
usbtv media: usbtv: Lock resolution while streaming 2025-08-28 16:26:08 +02:00
uvc media: uvcvideo: Do not mark valid metadata as invalid 2025-08-28 16:26:04 +02:00
Kconfig media: tm6000: deprecate this driver 2022-08-29 16:43:00 +02:00
Makefile media: tm6000: deprecate this driver 2022-08-29 16:43:00 +02:00