linux/drivers/media
Colin Ian King 67300abdbe media: cx25821: prevent out-of-bounds read on array card
Currently an out of range dev->nr is detected by just reporting the
issue and later on an out-of-bounds read on array card occurs because
of this. Fix this by checking the upper range of dev->nr with the size
of array card (removes the hard coded size), move this check earlier
and also exit with the error -ENOSYS to avoid the later out-of-bounds
array read.

Detected by CoverityScan, CID#711191 ("Out-of-bounds-read")

Fixes: commit 02b20b0b4c ("V4L/DVB (12730): Add conexant cx25821 driver")

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
[hans.verkuil@cisco.com: %ld -> %zd]
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
2018-02-26 08:00:06 -05:00
..
cec media: cec: add SPDX license info 2018-02-14 13:16:03 -05:00
common media: add SPDX license info 2018-02-14 13:17:03 -05:00
dvb-core vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
dvb-frontends media: ts2020: avoid integer overflows on 32 bit machines 2018-01-29 07:46:46 -05:00
firewire vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
i2c ov13858: fix endiannes warnings 2018-02-23 03:21:27 -05:00
mmc media: move dvb kAPI headers to include/media 2017-12-28 13:16:01 -05:00
pci media: cx25821: prevent out-of-bounds read on array card 2018-02-26 08:00:06 -05:00
platform media: venus: hfi: use true for boolean values 2018-02-26 07:53:09 -05:00
radio media: add SPDX license info 2018-02-14 13:17:03 -05:00
rc media: rc: get start time just before calling driver tx 2018-02-14 14:17:21 -05:00
spi [media] gs1662: drop kfree for memory allocated with devm_kzalloc 2016-10-24 17:59:08 -02:00
tuners media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
usb media: s2255drv: Remove unneeded if else blocks 2018-02-26 07:57:38 -05:00
v4l2-core media: v4l2-core: v4l2-mc: Add SPDX license identifier 2018-02-26 07:42:03 -05:00
Kconfig media: fix usage of whitespaces and on indentation 2018-01-04 13:12:01 -05:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
media-device.c media: media-device: use strlcpy() instead of strncpy() 2018-02-26 06:58:40 -05:00
media-devnode.c vfs: do bulk POLL* -> EPOLL* replacement 2018-02-11 14:34:03 -08:00
media-entity.c [media] media: Check for active and has_no_links overrun 2017-10-04 17:16:14 -03:00