Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Dan Carpenter d199218881 media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() ... [ Upstream commit 1657f2934d ] Ideally, strlen(cur->string.pointer) and strlen(out) would be the same. But this code is using strscpy() to avoid a potential buffer overflow. So in the same way we should take the strlen() of the smaller string to avoid a buffer overflow in the caller, gmin_get_var_int(). Link: https://lore.kernel.org/r/26124bcd-8132-4483-9d67-225c87d424e8@kili.mountain Fixes: 387041cda4 ("media: atomisp: improve sensor detection code to use _DSM table") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Signed-off-by: Hans de Goede <hdegoede@redhat.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		History 2023-07-19 16:21:54 +02:00
..
atomisp	media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var()	2023-07-19 16:21:54 +02:00
deprecated	media: av7110: prevent underflow in write_ts_to_decoder()	2023-05-11 23:03:10 +09:00
imx	media: Prefer designated initializers over memset for subdev pad ops	2023-05-24 17:32:36 +01:00
ipu3	ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection()	2023-01-07 11:11:51 +01:00
max96712	i2c: Make remove callback return void	2022-08-16 12:46:26 +02:00
meson/vdec	media: meson: vdec: fix possible refcount leak in vdec_probe()	2022-09-24 08:55:43 +02:00
omap4iss	media: Prefer designated initializers over memset for subdev pad ops	2023-05-24 17:32:36 +01:00
rkvdec	media: rkvdec: fix use after free bug in rkvdec_remove	2023-05-11 23:03:14 +09:00
sunxi	media: cedrus: fix use after free bug in cedrus_remove due to race condition	2023-05-11 23:03:14 +09:00
tegra-video	staging: media: tegra-video: fix device_node use after free	2023-01-07 11:11:49 +01:00
Kconfig	media: destage Hantro VPU driver	2022-08-31 10:23:50 +02:00
Makefile	media: destage Hantro VPU driver	2022-08-31 10:23:50 +02:00