linux-stable/include/media/davinci
Dan Carpenter b72845ee55 media: davinci/vpbe: array underflow in vpbe_enum_outputs()
In vpbe_enum_outputs() we check if (temp_index >= cfg->num_outputs) but
the problem is that "temp_index" can be negative.  This patch changes
the types to unsigned to address this array underflow bug.

Fixes: 66715cdc32 ("[media] davinci vpbe: VPBE display driver")

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: "Lad, Prabhakar" <prabhakar.csengg@gmail.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
2019-05-08 14:02:25 -04:00
..
ccdc_types.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
dm355_ccdc.h media: include: fix several typos 2019-03-01 09:45:52 -05:00
dm644x_ccdc.h media: include: fix several typos 2019-03-01 09:45:52 -05:00
isif.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpbe.h media: davinci/vpbe: array underflow in vpbe_enum_outputs() 2019-05-08 14:02:25 -04:00
vpbe_display.h [media] media/platform: convert drivers to use the new vb2_queue dev field 2016-07-08 14:39:21 -03:00
vpbe_osd.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpbe_types.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpbe_venc.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpfe_capture.h media: platform: davinci: drop VPFE_CMD_S_CCDC_RAW_PARAMS 2017-07-26 06:14:33 -04:00
vpfe_types.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpif_types.h [media] davinci: vpif_capture: get subdevs from DT when available 2017-06-07 12:17:12 -03:00
vpss.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00