linux/drivers/media
Dan Carpenter 3011e5e592 [media] firewire: firedtv-avc: potential buffer overflow
"program_info_length" is user controlled and can go up to 4095.  The
operand[] array has 509 bytes so we need to add a limit here to prevent
buffer overflows.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
2014-09-23 16:13:37 -03:00
..
common [media] drivers: media: b2c2: flexcop.h: Fix typo in include guard 2014-09-21 20:11:54 -03:00
dvb-core Merge remote-tracking branch 'linus/master' into patchwork 2014-09-21 16:40:04 -03:00
dvb-frontends [media] si2165: enable Si2161 support 2014-09-23 16:13:33 -03:00
firewire [media] firewire: firedtv-avc: potential buffer overflow 2014-09-23 16:13:37 -03:00
i2c [media] adv7604/adv7842: fix il_vbackporch typo and zero the struct 2014-09-21 20:41:00 -03:00
mmc
parport [media] v4l: Support extending the v4l2_pix_format structure 2014-07-17 12:44:47 -03:00
pci [media] cx23885: fix size helper functions 2014-09-21 20:42:29 -03:00
platform [media] v4l: ti-vpe: Remove casting the return value which is a void pointer 2014-09-22 19:21:08 -03:00
radio [media] radio-si470x-usb: use USB API functions rather than constants 2014-09-21 20:10:33 -03:00
rc [media] mceusb: add support for more cx231xx devices 2014-09-23 16:13:35 -03:00
tuners [media] tda18212: convert to RegMap API 2014-09-21 20:06:23 -03:00
usb [media] ttusb-dec: buffer overflow in ioctl 2014-09-23 16:13:37 -03:00
v4l2-core [media] v4l2-dv-timings: only check standards if non-zero 2014-09-21 20:40:33 -03:00
Kconfig [media] Kconfig: do not select SPI bus on sub-driver auto-select 2014-09-04 12:18:49 -03:00
Makefile
media-device.c [media] media: Use strlcpy instead of custom code 2014-09-21 20:27:08 -03:00
media-devnode.c [media] media-devnode: just return 0 instead of using a var 2014-09-03 17:59:28 -03:00
media-entity.c