media: adv7604: Prevent out of bounds access
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 4 Aug 2017 08:07:51 +0000 (04:07 -0400)
committerMauro Carvalho Chehab <mchehab@s-opensource.com>
Wed, 9 Aug 2017 14:35:15 +0000 (10:35 -0400)
commit7cc7a83394be1db510609d8d2f68c53b63a3ecff
tree2a66584f62ecd57d613031e6b188b8eb39c7f226
parentb050d46e4a64ab0b9df9a607a6c4dc7b28e9125b
media: adv7604: Prevent out of bounds access

These can only be accessed with CAP_SYS_ADMIN so it's not a critical
security issue.  The problem is that "page" is controlled by the user in
the ioctl().  The test to see if the bit is set in state->info->page_mask
is not sufficient because "page" can be very high and shift wrap around
to a bit which is set.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
drivers/media/i2c/adv7604.c