linux/drivers/media
Colin Ian King a24e6348e5 media: dvb_ca_en50221: sanity check slot number from userspace
Currently a user can pass in an unsanitized slot number which
will lead to and out of range index into ca->slot_info. Fix this
by checking that the slot number is no more than the allowed
maximum number of slots. Seems that this bug has been in the driver
forever.

Detected by CoverityScan, CID#139381 ("Untrusted pointer read")

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Jasmin Jessich <jasmin@anw.at>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
2017-12-14 09:51:17 -05:00
..
cec media: cec: disable the hardware when unregistered 2017-12-08 11:11:25 -05:00
common media: siano: fix a potential integer overflow 2017-12-14 09:50:12 -05:00
dvb-core media: dvb_ca_en50221: sanity check slot number from userspace 2017-12-14 09:51:17 -05:00
dvb-frontends media: dvb-frontends/stv0910: remove unneeded dvb_math.h include 2017-12-13 08:37:58 -05:00
firewire
i2c media: ov9650: fix bogus warnings 2017-12-11 13:04:55 -05:00
mmc License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
pci media: ddbridge: improve error handling logic on fe attach failures 2017-12-13 10:19:41 -05:00
platform media: drivers: media: remove duplicate includes 2017-12-13 09:58:39 -05:00
radio media: radio-si476x: fix behavior when seek->range* are defined 2017-12-11 13:04:51 -05:00
rc media: rc keymaps: add SPDX identifiers to the code I wrote 2017-12-11 07:42:54 -05:00
spi [media] gs1662: drop kfree for memory allocated with devm_kzalloc 2016-10-24 17:59:08 -02:00
tuners media: tda18250: support for new silicon tuner 2017-12-13 08:12:47 -05:00
usb media: dvbsky: MyGica T230C support 2017-12-14 06:35:18 -05:00
v4l2-core media: drivers: media: remove duplicate includes 2017-12-13 09:58:39 -05:00
Kconfig media: rc-core: do not depend on MEDIA_SUPPORT 2017-08-20 09:39:36 -04:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
media-device.c media: drop use of MEDIA_API_VERSION 2017-08-08 06:03:15 -04:00
media-devnode.c media: utilize new cdev_device_add helper function 2017-03-21 06:44:33 +01:00
media-entity.c [media] media: Check for active and has_no_links overrun 2017-10-04 17:16:14 -03:00