linux/drivers/media
Colin Ian King bc8e2d627a media: venus: fix loop wrap in cleanup of clks
The current pre-decrement is incorrect and should be replaced
with a post-decrement. Consider the case where the very first
clk_prepare_enable fails when i is 0; in this case the error
clean up will decrement the unsigned int which wraps to the
largest unsigned int value causing an array out of bounds read
on core->clks[i].

Detected by CoverityScan, CID#1446590 ("Out-of-bounds read")

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Hans Verkuil <hansverk@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
2017-06-24 09:38:53 -03:00
..
cec Linux 4.12-rc6 2017-06-20 08:51:56 -03:00
common [media] b2c2: constify nxt200x_config structure 2017-04-17 12:18:18 -03:00
dvb-core [media] dvb_ca_en50221: Fix wrong EXPORT_SYMBOL order 2017-06-07 13:21:25 -03:00
dvb-frontends [media] af9013: refactor power control 2017-06-20 10:35:08 -03:00
firewire [media] firewire: don't break long lines 2016-10-21 10:06:00 -02:00
i2c media: Revert "[media] et8ek8: Export OF device ID as module aliases" 2017-06-24 09:34:33 -03:00
mmc
pci [media] ddbridge: hardware IDs for new C2T2 cards and other devices 2017-06-20 09:59:48 -03:00
platform media: venus: fix loop wrap in cleanup of clks 2017-06-24 09:38:53 -03:00
radio media: radio: wl1273: add check on core->write() return value 2017-06-24 09:38:14 -03:00
rc [media] rc-core: cleanup rc_register_device pt2 2017-06-13 13:55:01 -03:00
spi [media] gs1662: drop kfree for memory allocated with devm_kzalloc 2016-10-24 17:59:08 -02:00
tuners [media] xc5000: Don't spin waiting for analog lock 2017-06-06 07:51:05 -03:00
usb media: rainshadow-cec: avoid -Wmaybe-uninitialized warning again 2017-06-24 09:37:28 -03:00
v4l2-core media: tuner-core: Remove unused #define PREFIX 2017-06-24 09:37:01 -03:00
Kconfig [media] cec: rename MEDIA_CEC_NOTIFIER to CEC_NOTIFIER 2017-06-04 15:23:35 -03:00
Makefile [media] cec: select CEC_CORE instead of depend on it 2017-06-04 15:23:33 -03:00
media-device.c [media] media: Rename graph and pipeline structs and functions 2017-01-27 16:13:24 -02:00
media-devnode.c media: utilize new cdev_device_add helper function 2017-03-21 06:44:33 +01:00
media-entity.c [media] media: entity: Catch unbalanced media_pipeline_stop calls 2017-06-23 09:23:36 -03:00