linux/drivers/media
Benoit Sevens 575a562f7a media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
commit ecf2b43018 upstream.

This can lead to out of bounds writes since frames of this type were not
taken into account when calculating the size of the frames buffer in
uvc_parse_streaming.

Fixes: c0efd23292 ("V4L/DVB (8145a): USB Video Class driver")
Signed-off-by: Benoit Sevens <bsevens@google.com>
Cc: stable@vger.kernel.org
Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2024-11-14 13:19:39 +01:00
..
cec media: pulse8-cec: fix data timestamp at pulse8_setup() 2024-11-14 13:19:34 +01:00
common media: v4l2-tpg: prevent the risk of a division by zero 2024-11-14 13:19:34 +01:00
dvb-core media: dvb_frontend: don't play tricks with underflow values 2024-11-14 13:19:33 +01:00
dvb-frontends media: cx24116: prevent overflows on SNR calculus 2024-11-14 13:19:34 +01:00
firewire media: firewire: firedtv-avc.c: replace BUG with proper, error return 2023-08-10 07:58:37 +02:00
i2c media: ar0521: don't overflow when checking PLL values 2024-11-14 13:19:34 +01:00
mc media: mc: mark the media devnode as registered from the, start 2024-06-16 13:47:35 +02:00
mmc media: media/*/Kconfig: sort entries 2022-03-18 05:58:35 +01:00
pci media: pci: cx23885: check cx23885_vdev_init() return 2024-08-29 17:33:33 +02:00
platform media: s5p-jpeg: prevent buffer overflows 2024-11-14 13:19:34 +01:00
radio media: radio-isa: use dev_name to fill in bus_info 2024-08-29 17:33:25 +02:00
rc lirc: rc_dev_get_from_fd(): fix file leak 2024-08-03 08:54:38 +02:00
spi media updates for v5.18-rc1 2022-03-23 14:51:35 -07:00
test-drivers media: vivid: don't set HDMI TX controls if there are no HDMI outputs 2024-09-12 11:11:31 +02:00
tuners Revert "media: tuners: fix error return code of hybrid_tuner_request_state()" 2024-10-04 16:29:46 +02:00
usb media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format 2024-11-14 13:19:39 +01:00
v4l2-core media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() 2024-11-14 13:19:34 +01:00
Kconfig media: Kconfig: Make DVB_CORE=m possible when MEDIA_SUPPORT=y 2022-12-07 17:58:46 +01:00
Makefile media: Makefiles: remove extra spaces 2022-03-12 16:59:52 +01:00