media: vicodec: fix memchr() kernel oops
authorHans Verkuil <hverkuil@xs4all.nl>
Sat, 17 Nov 2018 11:25:08 +0000 (06:25 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 13 Dec 2018 08:16:17 +0000 (09:16 +0100)
commit663bfc44d1a0ac440dd0d94ec7aa94a4c690f233
tree55567d54341d534e0f909ceb85d3d5aa36b69ecf
parentc4dabf370838d1cf3bae6e96fc1a02cd39f9404f
media: vicodec: fix memchr() kernel oops

commit cb3b2ffb757e75fef40fb94bc093cbbf49a6bf6e upstream.

The size passed to memchr is too large as it assumes the search
starts at the start of the buffer, but it can start at an offset.

Cc: <stable@vger.kernel.org> # for v4.19 and up
Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/platform/vicodec/vicodec-core.c