Ricardo Ribalda 09635bf4cd media: uvcvideo: Fix OOB read ... commit 41ebaa5e0e upstream. If the index provided by the user is bigger than the mask size, we might do an out of bound read. CC: stable@kernel.org Fixes: 40140eda66 ("media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU") Reported-by: Zubin Mithra <zsm@chromium.org> Signed-off-by: Ricardo Ribalda <ribalda@chromium.org> Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-10-06 14:57:04 +02:00
..
cec	media: cec: core: add adap_unconfigured() callback	2023-09-13 09:42:54 +02:00
common	media: vb2: frame_vector.c: replace WARN_ONCE with a comment	2023-10-06 14:56:56 +02:00
dvb-core	media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221	2023-06-09 10:34:13 +02:00
dvb-frontends	media: dvb: symbol fixup for dvb_attach()	2023-09-13 09:43:01 +02:00
firewire
i2c	media: i2c: Add a camera sensor top level menu	2023-09-13 09:43:00 +02:00
mc	media: mc: Get media_device directly from pad	2023-03-10 09:33:42 +01:00
mmc
pci	media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning	2023-09-23 11:11:07 +02:00
platform	media: via: Use correct dependency for camera sensor drivers	2023-10-06 14:56:32 +02:00
radio	media: radio-shark: Add endpoint checks	2023-05-30 14:03:20 +01:00
rc	media: rc: gpio-ir-recv: Fix support for wake-up	2023-05-11 23:03:15 +09:00
spi
test-drivers	media: vimc: Fix wrong function called when vimc_init() fails	2022-12-31 13:32:16 +01:00
tuners	media: tuners: qt1010: replace BUG_ON with a regular error	2023-09-23 11:11:06 +02:00
usb	media: uvcvideo: Fix OOB read	2023-10-06 14:57:04 +02:00
v4l2-core	media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()	2023-09-13 09:42:49 +02:00
Kconfig
Makefile