Minki/linux
1
0
Fork 1
mirror of https://github.com/torvalds/linux.git synced 2024-12-12 14:12:51 +00:00
Code Issues Packages Projects Releases Wiki Activity
4a287cfeea
linux/drivers/media/video
History
Duncan Sands 4a287cfeea V4L/DVB (3394): Bttv: correct bttv_risc_packed buffer size 
This patch fixes the strange crashes I was seeing after using
bttv card, caused by a buffer overflow in bttv_risc_packed.
The instruction buffer size calculation contains two errors:
(a) a non-zero padding value can push the start of the next bpl
section to just before a page border, leading to more scanline
splits and thus additional instructions.
(b) the first DMA region can be smaller than one page, so there can
be a scanline split even if bpl*lines is smaller than PAGE_SIZE.
For example, consider the case where offset is 0, bpl is 2, padding
is 4094, lines is smaller than 2048, the first DMA region has size 1
and all others have size PAGE_SIZE, assumed to equal 4096.  Then
all bpl regions cross page borders and the number of instructions
written is 2*lines+2, rather than lines+2 (the current estimate).
With this patch the number of instructions for this example is
estimated to be 2*lines+3.
Also, the BUG_ON that was supposed to catch buffer overflows contained
a thinko causing it fire only if the buffer was overrun by a factor of
16 or more, so it fixes the the BUG_ON's (using sizeof rather than "4").

Signed-off-by: Duncan Sands <baldrick@free.fr>
Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>
2006-02-27 00:09:48 -03:00
..
cpia2 V4L/DVB (3376): Add cpia2 camera support 2006-02-27 00:09:05 -03:00
cx88 V4L/DVB (3394): Bttv: correct bttv_risc_packed buffer size 2006-02-27 00:09:48 -03:00
cx25840 V4L/DVB (3354): Fix maximum for the saturation and contrast controls. 2006-02-27 00:08:20 -03:00
em28xx V4L/DVB (3392a): XC3028 code removed from -git versions 2006-02-27 00:09:41 -03:00
ovcamchip V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
saa7134 V4L/DVB (3380): TUV1236d: declare buffer as static const 2006-02-27 00:09:14 -03:00
adv7170.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
adv7175.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
arv.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
bt819.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
bt832.c V4L/DVB (3355): removed uneeded init on structs like static int foo=0 2006-01-13 14:10:19 -02:00
bt832.h [PATCH] v4l: 800: whitespace cleanups 2005-11-09 07:56:20 -08:00
bt848.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
bt856.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
btcx-risc.c V4L/DVB (3355): removed uneeded init on structs like static int foo=0 2006-01-13 14:10:19 -02:00
btcx-risc.h [PATCH] v4l: common part Updates and tuner additions 2005-09-09 13:57:49 -07:00
bttv-cards.c V4L/DVB (3411): group dvb-bt8xx Subsystem ID's together, in order. 2006-01-23 17:11:06 -02:00
bttv-driver.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
bttv-gpio.c [PATCH] Add bttv sub bus_type probe and remove methods 2006-01-13 11:26:11 -08:00
bttv-i2c.c V4L/DVB (3355): removed uneeded init on structs like static int foo=0 2006-01-13 14:10:19 -02:00
bttv-if.c [PATCH] v4l: 800: whitespace cleanups 2005-11-09 07:56:20 -08:00
bttv-input.c V4L/DVB (3349): Remote control codes for BTTV_BOARD_CONTVFMI 2006-02-27 00:08:15 -03:00
bttv-risc.c V4L/DVB (3394): Bttv: correct bttv_risc_packed buffer size 2006-02-27 00:09:48 -03:00
bttv-vbi.c V4L/DVB (3178): bttv VBI fixes 2006-01-09 15:25:27 -02:00
bttv.h [PATCH] Add bttv sub bus_type probe and remove methods 2006-01-13 11:26:11 -08:00
bttvp.h V4L/DVB (3354e): bttv semaphore to mutex conversion 2006-01-13 14:10:24 -02:00
bw-qcam.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
bw-qcam.h V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
c-qcam.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
compat_ioctl32.c V4L/DVB (3352): Some fixes to compat_ioctl32 2006-01-12 00:11:55 -02:00
cpia_pp.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
cpia_usb.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
cpia.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
cpia.h V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
cs53l32a.c V4L/DVB (3345): Fixes some bad global variables 2006-01-11 19:41:49 -02:00
cs8420.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
dpc7146.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
hexium_gemini.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
hexium_orion.c V4L/DVB (3318c): fix saa7146 kobject register failure 2006-02-07 06:49:15 -02:00
ibmmpeg2.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
indycam.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
indycam.h VINO driver version 0.0.5. 2005-11-07 18:05:41 +00:00
ir-kbd-i2c.c V4L/DVB (3393): Move all IR keymaps to ir-common module 2006-01-23 09:42:06 -02:00
Kconfig V4L/DVB (3376): Add cpia2 camera support 2006-02-27 00:09:05 -03:00
Makefile V4L/DVB (3376): Add cpia2 camera support 2006-02-27 00:09:05 -03:00
meye.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
meye.h V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
msp3400-driver.c V4L/DVB (3427): audmode and rxsubchans fixes (VIDIOC_G/S_TUNER) 2006-01-23 17:11:09 -02:00
msp3400-kthreads.c V4L/DVB (3427): audmode and rxsubchans fixes (VIDIOC_G/S_TUNER) 2006-01-23 17:11:09 -02:00
msp3400.h V4L/DVB (3427): audmode and rxsubchans fixes (VIDIOC_G/S_TUNER) 2006-01-23 17:11:09 -02:00
mt20xx.c V4L/DVB (3384): Separate tv & radio freqs, fix cb/freq transmit order for tuners that need this. 2006-01-15 21:25:32 -02:00
mxb.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
mxb.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
planb.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
planb.h V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
pms.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
rds.h [PATCH] saa6588 __user annotations 2005-09-29 08:46:27 -07:00
saa711x.c V4L/DVB (3354a): Remove old MODULE_PARM in media/video/ 2006-01-13 14:10:23 -02:00
saa5246a.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
saa5246a.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
saa5249.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
saa6588.c V4L/DVB (3354a): Remove old MODULE_PARM in media/video/ 2006-01-13 14:10:23 -02:00
saa7110.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
saa7111.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
saa7114.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
saa7115.c V4L/DVB (3354): Fix maximum for the saturation and contrast controls. 2006-02-27 00:08:20 -03:00
saa7121.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
saa7127.c V4L/DVB (3345): Fixes some bad global variables 2006-01-11 19:41:49 -02:00
saa7146.h V4L/DVB (3344c): Pci probing for stradis driver 2006-01-11 19:41:13 -02:00
saa7146reg.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
saa7185.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
saa7191.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
saa7191.h VINO driver version 0.0.5. 2005-11-07 18:05:41 +00:00
saa7196.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
stradis.c V4L/DVB (3439a): media video stradis memory fix 2006-01-26 04:37:06 -02:00
tda7432.c V4L/DVB (3345): Fixes some bad global variables 2006-01-11 19:41:49 -02:00
tda8290.c V4L/DVB (3378): Restore power on defaults of tda9887 after tda8290 probe 2006-02-27 00:09:11 -03:00
tda9840.c Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/i2c-2.6 2006-01-06 15:25:08 -08:00
tda9840.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
tda9875.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
tda9887.c V4L/DVB (3300): Add standard for South Korean NTSC-M using A2 audio. 2006-02-07 06:48:40 -02:00
tea5767.c V4L/DVB (3384): Separate tv & radio freqs, fix cb/freq transmit order for tuners that need this. 2006-01-15 21:25:32 -02:00
tea6415c.c Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/i2c-2.6 2006-01-06 15:25:08 -08:00
tea6415c.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
tea6420.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
tea6420.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
tuner-3036.c V4L/DVB (3344b): don't ignore return from i2c_add_driver() for tuner-3036 2006-01-11 19:41:04 -02:00
tuner-core.c V4L/DVB (3392a): XC3028 code removed from -git versions 2006-02-27 00:09:41 -03:00
tuner-simple.c V4L/DVB (3278): Show debug for tuners trying to use unsupported video standards 2006-02-07 06:25:40 -02:00
tuner-types.c V4L/DVB (3332): XC3028 code marked with an special define option 2006-02-27 00:07:37 -03:00
tvaudio.c V4L/DVB (3427): audmode and rxsubchans fixes (VIDIOC_G/S_TUNER) 2006-01-23 17:11:09 -02:00
tvaudio.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
tveeprom.c V4L/DVB (3363): Add support for Samsung tuner TCPN 2121P30A 2006-01-13 14:10:25 -02:00
tvmixer.c V4L/DVB (3307): Some cleanups at I2C modules 2006-01-09 15:53:26 -02:00
tvp5150_reg.h V4L/DVB (3408): Included new sliced VBI types to videodev2.h and tvp5150 2006-01-23 17:11:05 -02:00
tvp5150.c V4L/DVB (3325): Disabled debug on by default in tvp5150 2006-02-07 07:41:00 -02:00
v4l1-compat.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
v4l2-common.c V4L/DVB (3374): Adds debuging v4l2_memory enum 2006-02-27 00:08:58 -03:00
video-buf-dvb.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
video-buf.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
videocodec.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
videocodec.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
videodev.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
vino.c V4L/DVB (3318b): sem2mutex: drivers/media/, #2 2006-02-07 06:49:14 -02:00
vino.h [PATCH] Indycam / VINO drivers 2005-09-07 16:58:01 -07:00
vpx3220.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
w9966.c V4L (926_2): Moves compat32 functions from fs to v4l subsystem 2006-01-09 15:24:57 -02:00
wm8775.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
zoran_card.c [PATCH] Fix zoran_card compilation warning 2006-01-15 10:09:35 -08:00
zoran_card.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zoran_device.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zoran_device.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zoran_driver.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
zoran_procfs.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zoran_procfs.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zoran.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zr36016.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
zr36016.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zr36050.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
zr36050.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zr36057.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zr36060.c V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc 2006-01-11 19:40:56 -02:00
zr36060.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zr36120_i2c.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zr36120_mem.c Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zr36120_mem.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
zr36120.c V4L (926_2): Moves compat32 functions from fs to v4l subsystem 2006-01-09 15:24:57 -02:00
zr36120.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00