linux/drivers/media/v4l2-core
Sakari Ailus a56bc17159 [media] v4l: compat: Prevent allocating excessive amounts of memory
get_v4l2_ext_controls32() is used to convert the 32-bit compat struct into
native 64-bit representation. The function multiplies the array length by
the entry length before validating size. Perform the size validation
first.

Also use unsigned values for size computation.

Make similar changes to get_v4l2_buffer32() for multi-plane buffers.

Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
2016-11-22 10:31:23 -02:00
..
Kconfig [media] v4l2-dv-timings: add helpers for vic and pixelaspect ratio 2016-11-16 15:20:03 -02:00
Makefile [media] v4l2-mc: add a generic function to create the media graph 2016-02-10 07:23:40 -02:00
tuner-core.c [media] tuner-core: use pr_foo, instead of internal printk macros 2016-11-18 10:04:28 -02:00
v4l2-async.c [media] v4l2-async: remove unneeded .registered_async callback 2016-08-24 16:49:45 -03:00
v4l2-clk.c [media] v4l2-clk: v4l2_clk_get() also need to find the of_fullname clock 2015-11-17 15:19:52 -02:00
v4l2-common.c [media] v4l2-common: Delete an unnecessary check before the function call "spi_unregister_device" 2016-08-24 09:41:37 -03:00
v4l2-compat-ioctl32.c [media] v4l: compat: Prevent allocating excessive amounts of memory 2016-11-22 10:31:23 -02:00
v4l2-ctrls.c [media] v4l: ctrls: Add deinterlacing mode control 2016-11-16 16:16:08 -02:00
v4l2-dev.c [media] v4l2-core: Add support for touch devices 2016-08-23 16:28:04 -03:00
v4l2-device.c [media] v4l: Do not allow re-registering sub-devices 2016-08-24 16:47:24 -03:00
v4l2-dv-timings.c [media] v4l2-dv-timings: add helpers for vic and pixelaspect ratio 2016-11-16 15:20:03 -02:00
v4l2-event.c [media] v4l2-event: v4l2_event_queue: do nothing if vdev == NULL 2015-07-17 09:15:27 -03:00
v4l2-fh.c [media] media: Change v4l-core to check if source is free 2016-02-27 08:46:55 -03:00
v4l2-flash-led-class.c [media] v4l2-flash-led-class: remove a now unused var 2016-10-24 18:51:29 -02:00
v4l2-ioctl.c [media] videodev2.h Add HSV formats 2016-10-21 15:44:54 -02:00
v4l2-mc.c Update my main e-mails at the Kernel tree 2016-06-15 15:35:37 -10:00
v4l2-mem2mem.c [media] v4l2-mem2mem.h: move descriptions from .c file 2016-09-09 10:05:32 -03:00
v4l2-of.c [media] v4l: of: Correct v4l2_of_parse_endpoint() kernel-doc 2016-02-01 10:01:22 -02:00
v4l2-subdev.c [media] v4l2-subdev.h: Improve documentation 2016-07-23 08:04:21 -03:00
v4l2-trace.c [media] media: videobuf2: Prepare to divide videobuf2 2015-10-20 15:12:45 -02:00
vb2-trace.c [media] media: videobuf2: Prepare to divide videobuf2 2015-10-20 15:12:45 -02:00
videobuf2-core.c [media] v4l2-core: don't break long lines 2016-10-21 09:56:08 -02:00
videobuf2-dma-contig.c [media] vb2: add WARN_ONs checking if a valid struct device was passed 2016-08-24 10:18:42 -03:00
videobuf2-dma-sg.c [media] vb2: add WARN_ONs checking if a valid struct device was passed 2016-08-24 10:18:42 -03:00
videobuf2-dvb.c [media] add media controller support to videobuf2-dvb 2016-02-10 07:23:41 -02:00
videobuf2-memops.c mm: replace get_vaddr_frames() write/force parameters with gup_flags 2016-10-19 08:11:24 -07:00
videobuf2-v4l2.c [media] v4l2-core: don't break long lines 2016-10-21 09:56:08 -02:00
videobuf2-vmalloc.c [media] v4l2-core: don't break long lines 2016-10-21 09:56:08 -02:00
videobuf-core.c [media] v4l2-core: don't break long lines 2016-10-21 09:56:08 -02:00
videobuf-dma-contig.c [media] videobuf-dma-contig: set vm_pgoff to be zero to pass the sanity check in vm_iomap_memory() 2014-10-24 09:32:41 -02:00
videobuf-dma-sg.c mm: replace get_user_pages() write/force parameters with gup_flags 2016-10-19 08:11:43 -07:00
videobuf-dvb.c
videobuf-vmalloc.c [media] Revert "[media] videobuf_vm_{open,close} race fixes" 2014-02-04 06:29:46 -02:00