linux/drivers/media/pci
Dan Carpenter 8e4d86e241 media: saa7146: fix array overflow in vidioc_s_audio()
The "a->index" value comes from the user via the ioctl.  The problem is
that the shift can wrap resulting in setting "mxb->cur_audinput" to an
invalid value, which later results in an array overflow.

Fixes: 6680427791 ("[media] mxb: fix audio handling")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
2020-12-03 07:46:34 +01:00
..
b2c2 media: b2c2: switch from 'pci_' to 'dma_' API 2020-11-27 14:07:50 +01:00
bt8xx media: bttv: use generic power management 2020-11-27 14:11:26 +01:00
cobalt media: pci: cobalt-i2c.c: fix comparison of 0/1 to bool variable 2020-08-29 08:04:01 +02:00
cx18 media: cx18: Replace http links with https ones 2020-07-19 14:00:32 +02:00
cx88 media: cx88: use ARRAY_SIZE 2020-12-03 07:37:07 +01:00
cx23885 media: cx23885: add more quirks for reset DMA on some AMD IOMMU 2020-12-03 07:29:12 +01:00
cx25821 media: Bulk remove BUG_ON(in_interrupt()) 2020-11-16 10:31:10 +01:00
ddbridge treewide: Use fallthrough pseudo-keyword 2020-08-23 17:36:59 -05:00
dm1105 media: dm1105: switch from 'pci_' to 'dma_' API 2020-11-27 14:10:07 +01:00
dt3155 media: media/pci: use vb2_video_unregister_device() 2020-08-28 15:01:54 +02:00
intel media: ipu3-cio2: fix trivial style warning 2020-11-25 14:42:06 +01:00
ivtv media updates for v5.9-rc1 2020-08-07 13:00:53 -07:00
mantis media: mantis: remove redundant assignment to variable err 2020-11-27 11:12:27 +01:00
meye treewide: Use fallthrough pseudo-keyword 2020-08-23 17:36:59 -05:00
netup_unidvb media: netup_unidvb: drop initialization of PM pointers 2020-09-27 11:24:28 +02:00
ngene media: ngene: convert tasklets to use new tasklet_setup() API 2020-08-29 08:11:47 +02:00
pluto2
pt1
pt3
saa7134 media: saa7134: improve f->fmt.win.clips NULL check 2020-11-17 07:13:27 +01:00
saa7146 media: saa7146: fix array overflow in vidioc_s_audio() 2020-12-03 07:46:34 +01:00
saa7164 media: saa7164: convert to use DEFINE_SEQ_ATTRIBUTE macro 2020-11-16 10:31:09 +01:00
smipcie media: rc: harmonize infrared durations to microseconds 2020-09-03 16:18:55 +02:00
solo6x10 media: solo6x10: fix missing snd_card_free in error handling case 2020-11-17 07:13:45 +01:00
sta2x11 media: media/pci: use vb2_video_unregister_device() 2020-08-28 15:01:54 +02:00
ttpci media: av7110: don't do float point math 2020-09-12 09:39:37 +02:00
tw68 media: tw68: use generic power management 2020-07-19 14:24:57 +02:00
tw686x media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO 2020-02-24 16:53:50 +01:00
tw5864 media: tw5864: check status of tw5864_frameinterval_get 2020-08-29 08:16:16 +02:00
Kconfig Revert "media: Kconfig: better support hybrid TV devices" 2020-04-14 11:00:30 +02:00
Makefile