Ricardo Ribalda 41ebaa5e0e media: uvcvideo: Fix OOB read ...

If the index provided by the user is bigger than the mask size, we might do
an out of bound read.

CC: stable@kernel.org
Fixes: 40140eda66 ("media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU")
Reported-by: Zubin Mithra <zsm@chromium.org>
Signed-off-by: Ricardo Ribalda <ribalda@chromium.org>
Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org>
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>

2023-09-14 23:31:55 +02:00

..

airspy

media: airspy: fix memory leak in airspy probe

2022-08-30 07:31:42 +02:00

as102

media: usb: as102: drop as102_dev NULL check

2023-06-09 16:07:30 +01:00

au0828

media: mc: Make media_get_pad_index() use pad type flag

2023-05-25 16:21:22 +02:00

b2c2

media: flexcop-usb: use usb_endpoint_maxp()

2022-09-26 10:59:25 +02:00

cx231xx

media: avoid use of 'videobuf'

2022-08-29 16:27:18 +02:00

dvb-usb

media: dvb-usb: opera1: fix uninit-value in dvb_usb_adapter_dvb_init

2023-07-19 12:57:50 +02:00

dvb-usb-v2

media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer

2023-07-19 12:57:50 +02:00

em28xx

media: v4l: Use correct dependency for camera sensor drivers

2023-09-14 12:38:17 +02:00

go7007

media: v4l: Use correct dependency for camera sensor drivers

2023-09-14 12:38:17 +02:00

gspca

media: gspca: Fix typo 'the the' in comment

2022-08-29 15:32:14 +02:00

hackrf

media: Kconfig: cleanup VIDEO_DEV dependencies

2022-03-18 05:58:35 +01:00

hdpvr

media: hdpvr: fix error value returns in hdpvr_read

2022-06-27 09:02:50 +01:00

msi2500

media: usb/msi2500: fix repeated words in comments

2022-09-24 08:46:38 +02:00

pvrusb2

media: usb: pvrusb2: fix inconsistent indenting

2023-08-10 07:58:36 +02:00

pwc

media: usb: pwc-uncompress: Use flex array destination for memcpy()

2022-12-07 17:58:46 +01:00

s2255

treewide: Convert del_timer*() to timer_shutdown*()

2022-12-25 13:38:09 -08:00

siano

drivers: usb: smsusb: fix error handling code in smsusb_init_device

2023-07-19 12:57:47 +02:00

stk1160

media: stk1160: Simplify the build config definition

2023-05-25 16:21:20 +02:00

ttusb-budget

media: dvb-ttusb-budget: cleanup printk logic

2020-09-03 11:15:47 +02:00

ttusb-dec

media: ttusb-dec: remove unnecessary (void*) conversions

2023-07-19 12:57:47 +02:00

usbtv

usbtv: usbtv_set_regs: the pipe is output

2023-04-11 17:10:10 +02:00

uvc

media: uvcvideo: Fix OOB read

2023-09-14 23:31:55 +02:00

Kconfig

media: tm6000: deprecate this driver

2022-08-29 16:43:00 +02:00

Makefile

media: tm6000: deprecate this driver

2022-08-29 16:43:00 +02:00