github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-06-14 10:03:05 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
6446325351
linux/include/media/davinci
History
Dan Carpenter 8276749b38 media: davinci/vpbe: array underflow in vpbe_enum_outputs() 
[ Upstream commit b72845ee55 ]

In vpbe_enum_outputs() we check if (temp_index >= cfg->num_outputs) but
the problem is that "temp_index" can be negative.  This patch changes
the types to unsigned to address this array underflow bug.

Fixes: 66715cdc32 ("[media] davinci vpbe: VPBE display driver")

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: "Lad, Prabhakar" <prabhakar.csengg@gmail.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-01-27 14:50:47 +01:00
..
ccdc_types.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
dm355_ccdc.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
dm644x_ccdc.h media: platform: davinci: drop VPFE_CMD_S_CCDC_RAW_PARAMS 2017-07-26 06:14:33 -04:00
isif.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpbe_display.h [media] media/platform: convert drivers to use the new vb2_queue dev field 2016-07-08 14:39:21 -03:00
vpbe_osd.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpbe_types.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpbe_venc.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpbe.h media: davinci/vpbe: array underflow in vpbe_enum_outputs() 2020-01-27 14:50:47 +01:00
vpfe_capture.h media: platform: davinci: drop VPFE_CMD_S_CCDC_RAW_PARAMS 2017-07-26 06:14:33 -04:00
vpfe_types.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00
vpif_types.h [media] davinci: vpif_capture: get subdevs from DT when available 2017-06-07 12:17:12 -03:00
vpss.h [media] media: Drop FSF's postal address from the source code files 2017-01-27 11:38:09 -02:00