Michael Bommarito 37bef2170d media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity ... vdec_av1_slice_setup_tile() copies tile_cols + 1 / tile_rows + 1 entries into mi_col_starts[] / mi_row_starts[] from the bitstream tile_info. Bound the copy to the array capacity. Fixes: 0934d37596 ("media: mediatek: vcodec: separate decoder and encoder") Assisted-by: Claude:claude-opus-4-8 Cc: stable@vger.kernel.org Signed-off-by: Michael Bommarito <michael.bommarito@gmail.com> Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>		2026-09-07 09:01:05 +02:00
..
vdec_av1_req_lat_if.c	media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity	2026-09-07 09:01:05 +02:00
vdec_h264_if.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
vdec_h264_req_common.c
vdec_h264_req_common.h	media: mediatek: vcodec: Replace false function description	2024-03-25 10:13:43 +01:00
vdec_h264_req_if.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
vdec_h264_req_multi_if.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
vdec_hevc_req_multi_if.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
vdec_vp8_if.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
vdec_vp8_req_if.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
vdec_vp9_if.c	media: mediatek: vcodec: use = { } instead of memset()	2026-01-05 15:56:31 +01:00
vdec_vp9_req_lat_if.c	media: mediatek: vcodec: remove redundant return value of vdec_vp9_slice_setup_prob_buffer()	2026-07-17 12:36:48 +02:00