media: atomisp: prevent integer overflow in sh_css_set_black_frame()
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 1 Sep 2022 05:20:09 +0000 (07:20 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 3 Nov 2022 14:59:14 +0000 (23:59 +0900)
commita560aeac2f2d284903b5900774765d7fc61547bc
tree323dabb53ac7cebfc2a9ce27a6c4db5d43a782ba
parent32f93e4608611104c08812c1922db83cae26d8d0
media: atomisp: prevent integer overflow in sh_css_set_black_frame()

[ Upstream commit 3ad290194bb06979367622e47357462836c1d3b4 ]

The "height" and "width" values come from the user so the "height * width"
multiplication can overflow.

Link: https://lore.kernel.org/r/YxBBCRnm3mmvaiuR@kili
Fixes: a49d25364dfb ("staging/atomisp: Add support for the Intel IPU v2")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Andy Shevchenko <andriy.shevchenko@intel.com>
Signed-off-by: Hans de Goede <hdegoede@redhat.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/staging/media/atomisp/pci/sh_css_params.c