projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a3d71f2) | patch
media: vivid: potential integer overflow in vidioc_g_edid()
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 17 May 2018 08:58:25 +0000 (04:58 -0400)
committerMauro Carvalho Chehab <mchehab+samsung@kernel.org>
Mon, 28 May 2018 20:12:07 +0000 (16:12 -0400)
commit9329e7b03c6998cae2d2ba75dd697b07147f3830
treec95948a0b01d4ce22dbde827b287fa894e23e6ddtree | snapshot
parenta3d71f256c8a8b5d51ea0dfd09cd85ce3a09d9e1commit | diff
media: vivid: potential integer overflow in vidioc_g_edid()

If we pick a very large "edid->blocks" value then the "edid->start_block
+ edid->blocks" addition could wrap around.

Fixes: ef834f7836ec ("[media] vivid: add the video capture and output parts")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
drivers/media/platform/vivid/vivid-vid-common.c diff | blob | history
Domain: System / Kernel;