linux/drivers/media
Peilin Ye 4ffb879ea6 media: media/v4l2-core: Fix kernel-infoleak in video_put_user()
video_put_user() is copying uninitialized stack memory to userspace due
to the compiler not initializing holes in the structures declared on the
stack. Fix it by initializing `ev32` and `vb32` using memset().

Reported-and-tested-by: syzbot+79d751604cb6f29fbf59@syzkaller.appspotmail.com
Link: https://syzkaller.appspot.com/bug?extid=79d751604cb6f29fbf59

Cc: stable@vger.kernel.org
Fixes: 1a6c0b36dd ("media: v4l2-core: fix VIDIOC_DQEVENT for time64 ABI")
Fixes: 577c89b0ce ("media: v4l2-core: fix v4l2_buffer handling for time64 ABI")
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Reviewed-by: Arnd Bergmann <arnd@arndb.de>
Signed-off-by: Peilin Ye <yepeilin.cs@gmail.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
2020-08-26 16:29:36 +02:00
..
cec cec-api: prevent leaking memory through hole in structure 2020-07-19 07:43:14 +02:00
common media: videobuf2: Print videobuf2 buffer state by name 2020-07-19 14:25:36 +02:00
dvb-core media: videobuf2: add queue memory consistency parameter 2020-06-23 13:31:12 +02:00
dvb-frontends media updates for v5.9-rc1 2020-08-07 13:00:53 -07:00
firewire media: firewire: Using uninitialized values in node_probe() 2020-07-04 11:57:10 +02:00
i2c media: i2c: Add RDACM20 driver 2020-07-19 14:15:42 +02:00
mc media: media-request: Fix crash if memory allocation fails 2020-06-23 15:19:37 +02:00
mmc media updates for v5.8-rc1 2020-06-03 20:59:38 -07:00
pci pci-v5.9-changes 2020-08-07 18:48:15 -07:00
platform media: ti-vpe: cal: Fix compilation on 32-bit ARM 2020-08-26 16:28:57 +02:00
radio media: radio: remove redundant assignment to variable retval 2020-08-06 11:28:21 +02:00
rc media: imon: Replace http links with https ones 2020-07-19 14:00:32 +02:00
spi media: i2c/Kconfig: use sub-menus for I2C support 2020-04-16 10:34:40 +02:00
test-drivers media: vimc: Add a control to display info on test image 2020-07-19 13:39:22 +02:00
tuners treewide: Remove uninitialized_var() usage 2020-07-16 12:35:15 -07:00
usb media updates for v5.9-rc1 2020-08-07 13:00:53 -07:00
v4l2-core media: media/v4l2-core: Fix kernel-infoleak in video_put_user() 2020-08-26 16:29:36 +02:00
Kconfig media: media/test_drivers: rename to test-drivers 2020-04-16 10:38:31 +02:00
Makefile media: media/test_drivers: rename to test-drivers 2020-04-16 10:38:31 +02:00