Zhang Shurong aa4a447b81 media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer ... In rtl28xxu_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach rtl28xxu_i2c_xfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 0ed554fd76 ("media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()") Link: https://lore.kernel.org/linux-media/tencent_3623572106754AC2F266B316798B0F6CCA05@qq.com Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>		2023-05-14 06:30:03 +01:00
..
af9015.c	media: usb: dvb-usb-v2: af9015.c: return 0 instead of 'ret'.	2023-02-08 08:31:05 +01:00
af9015.h
af9035.c	media: usb/dvb-usb-v2: fix repeated words in comments	2022-09-24 08:47:01 +02:00
af9035.h
anysee.c	media: anysee: simplify the return expression of anysee_ci_* function	2021-03-11 11:59:44 +01:00
anysee.h
au6610.c
au6610.h
az6007.c
ce6230.c	media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()	2023-05-14 06:30:01 +01:00
ce6230.h
dvb_usb_common.h
dvb_usb_core.c
dvb_usb_urb.c
dvb_usb.h	media: media/usb: fix kernel-doc header issues	2021-03-22 12:51:50 +01:00
dvbsky.c	media: dvbsky: add support for MyGica T230C2_LITE and T230A	2021-07-12 09:16:29 +02:00
ec168.c	media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()	2023-05-14 06:29:59 +01:00
ec168.h
gl861.c	media: Use fallthrough pseudo-keyword	2020-08-29 08:35:27 +02:00
Kconfig	media: media/*/Kconfig: sort entries	2022-03-18 05:58:35 +01:00
lmedm04.c	media: lmedm04: don't ignore errors when setting a filter	2021-11-29 13:23:14 +01:00
lmedm04.h	media: docs: move driver-specific info to driver-api	2020-04-14 10:36:18 +02:00
Makefile
mxl111sf-demod.c
mxl111sf-demod.h
mxl111sf-gpio.c	media: Use fallthrough pseudo-keyword	2020-08-29 08:35:27 +02:00
mxl111sf-gpio.h
mxl111sf-i2c.c
mxl111sf-i2c.h
mxl111sf-phy.c
mxl111sf-phy.h
mxl111sf-reg.h
mxl111sf-tuner.c
mxl111sf-tuner.h
mxl111sf.c	media: mxl111sf: change mutex_init() location	2021-09-30 10:08:01 +02:00
mxl111sf.h	media: docs: move driver-specific info to driver-api	2020-04-14 10:36:18 +02:00
rtl28xxu.c	media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer	2023-05-14 06:30:03 +01:00
rtl28xxu.h
usb_urb.c
zd1301.c	media: usb: dvb-usb-v2: zd1301: fix missing platform_device_unregister()	2020-11-17 06:57:29 +01:00