media: imx274: fix stack corruption in imx274_read_reg
authorLuca Ceresoli <luca@lucaceresoli.net>
Mon, 26 Nov 2018 16:35:07 +0000 (11:35 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 9 Jan 2019 16:38:47 +0000 (17:38 +0100)
commit257ad26e7e98c7ec60692f7efa704076a5d9f7a7
tree72b541e198d597b6bb8100aadc774dc06dad33a7
parent7ce31f635b23fb68555a6f3fc2c36789d70fdf62
media: imx274: fix stack corruption in imx274_read_reg

commit cea8c0077d6cf3a0cea2f18a8e914af78d46b2ff upstream.

imx274_read_reg() takes a u8 pointer ("reg") and casts it to pass it
to regmap_read(), which takes an unsigned int pointer. This results in
a corrupted stack and random crashes.

Fixes: 0985dd306f72 ("media: imx274: V4l2 driver for Sony imx274 CMOS sensor")

Cc: stable@vger.kernel.org # for 4.15 and up
Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net>
Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/i2c/imx274.c