linux-stable/drivers/media
James Reynolds 0fe6ea18f2 media: mceusb: Fix potential out-of-bounds shift
commit 1b43bad31f upstream.

When processing a MCE_RSP_GETPORTSTATUS command, the bit index to set in
ir->txports_cabled comes from response data, and isn't validated.

As ir->txports_cabled is a u8, nothing should be done if the bit index
is greater than 7.

Cc: stable@vger.kernel.org
Reported-by: syzbot+ec3b3128c576e109171d@syzkaller.appspotmail.com
Signed-off-by: James Reynolds <jr@memlen.com>
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-03-04 11:38:23 +01:00
..
cec media: cec: add stm32 driver 2021-02-03 23:28:37 +01:00
common media: Revert "media: videobuf2: Fix length check for single plane dmabuf queueing" 2021-01-30 13:55:17 +01:00
dvb-core media fixes for v5.9-rc7 2020-09-24 09:05:04 -07:00
dvb-frontends media: dvb-frontends/drxk_hard.c: fix uninitialized variable warning 2020-10-08 14:15:14 +02:00
firewire media: firewire: fix memory leak 2020-09-27 11:29:45 +02:00
i2c media: i2c: ov5670: Fix PIXEL_RATE minimum value 2021-03-04 11:37:39 +01:00
mc media: mc-device.c: change media_device_request_alloc to match media_ioctl_info 2020-08-29 08:15:23 +02:00
mmc media updates for v5.8-rc1 2020-06-03 20:59:38 -07:00
pci media: cx25821: Fix a bug when reallocating some dma memory 2021-03-04 11:37:43 +01:00
platform media: pxa_camera: declare variable when DEBUG is defined 2021-03-04 11:37:43 +01:00
radio Linux 5.9-rc4 2020-09-07 16:13:06 +02:00
rc media: mceusb: Fix potential out-of-bounds shift 2021-03-04 11:38:23 +01:00
spi media: i2c/Kconfig: use sub-menus for I2C support 2020-04-16 10:34:40 +02:00
test-drivers media: vidtv: psi: fix missing crc for PMT 2021-03-04 11:37:43 +01:00
tuners media: qm1d1c0042: fix error return code in qm1d1c0042_init() 2021-03-04 11:37:43 +01:00
usb media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values 2021-03-04 11:37:43 +01:00
v4l2-core media: v4l2-fwnode: Return -EINVAL for invalid bus-type 2020-12-30 11:53:11 +01:00
Kconfig media: media/test_drivers: rename to test-drivers 2020-04-16 10:38:31 +02:00
Makefile media: media/test_drivers: rename to test-drivers 2020-04-16 10:38:31 +02:00