linux-stable/drivers/media/usb
Ricardo Ribalda 41ebaa5e0e media: uvcvideo: Fix OOB read
If the index provided by the user is bigger than the mask size, we might do
an out of bound read.

CC: stable@kernel.org
Fixes: 40140eda66 ("media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU")
Reported-by: Zubin Mithra <zsm@chromium.org>
Signed-off-by: Ricardo Ribalda <ribalda@chromium.org>
Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org>
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
2023-09-14 23:31:55 +02:00
..
airspy media: airspy: fix memory leak in airspy probe 2022-08-30 07:31:42 +02:00
as102 media: usb: as102: drop as102_dev NULL check 2023-06-09 16:07:30 +01:00
au0828 media: mc: Make media_get_pad_index() use pad type flag 2023-05-25 16:21:22 +02:00
b2c2 media: flexcop-usb: use usb_endpoint_maxp() 2022-09-26 10:59:25 +02:00
cx231xx media: avoid use of 'videobuf' 2022-08-29 16:27:18 +02:00
dvb-usb media: dvb-usb: opera1: fix uninit-value in dvb_usb_adapter_dvb_init 2023-07-19 12:57:50 +02:00
dvb-usb-v2 media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer 2023-07-19 12:57:50 +02:00
em28xx media: v4l: Use correct dependency for camera sensor drivers 2023-09-14 12:38:17 +02:00
go7007 media: v4l: Use correct dependency for camera sensor drivers 2023-09-14 12:38:17 +02:00
gspca media: gspca: Fix typo 'the the' in comment 2022-08-29 15:32:14 +02:00
hackrf media: Kconfig: cleanup VIDEO_DEV dependencies 2022-03-18 05:58:35 +01:00
hdpvr media: hdpvr: fix error value returns in hdpvr_read 2022-06-27 09:02:50 +01:00
msi2500 media: usb/msi2500: fix repeated words in comments 2022-09-24 08:46:38 +02:00
pvrusb2 media: usb: pvrusb2: fix inconsistent indenting 2023-08-10 07:58:36 +02:00
pwc media: usb: pwc-uncompress: Use flex array destination for memcpy() 2022-12-07 17:58:46 +01:00
s2255 treewide: Convert del_timer*() to timer_shutdown*() 2022-12-25 13:38:09 -08:00
siano drivers: usb: smsusb: fix error handling code in smsusb_init_device 2023-07-19 12:57:47 +02:00
stk1160 media: stk1160: Simplify the build config definition 2023-05-25 16:21:20 +02:00
ttusb-budget media: dvb-ttusb-budget: cleanup printk logic 2020-09-03 11:15:47 +02:00
ttusb-dec media: ttusb-dec: remove unnecessary (void*) conversions 2023-07-19 12:57:47 +02:00
usbtv usbtv: usbtv_set_regs: the pipe is output 2023-04-11 17:10:10 +02:00
uvc media: uvcvideo: Fix OOB read 2023-09-14 23:31:55 +02:00
Kconfig media: tm6000: deprecate this driver 2022-08-29 16:43:00 +02:00
Makefile media: tm6000: deprecate this driver 2022-08-29 16:43:00 +02:00