android_kernel_sony_sdm845/drivers/media
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Benoit Sevens 8d8dac5308
UPSTREAM: USB: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
This can lead to out of bounds writes since frames of this type were not
taken into account when calculating the size of the frames buffer in
uvc_parse_streaming.

Fixes: c0efd23292 ("V4L/DVB (8145a): USB Video Class driver")
Signed-off-by: Benoit Sevens <bsevens@google.com>
Cc: stable@vger.kernel.org
Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 378455392
(cherry picked from commit ecf2b43018da9579842c774b7f35dbe11b5c38dd)
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I959a6374ba7adf021fc19da755f5c7611fef9b8c
2025-02-06 16:16:59 +02:00
..
common media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() 2022-01-27 08:47:37 +01:00
dvb-core Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-20 2023-01-19 15:42:12 +01:00
dvb-frontends media: stv0288: use explicitly signed char 2023-01-07 12:07:35 +01:00
firewire media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() 2022-01-29 10:15:58 +01:00
i2c media: i2c: ad5820: Fix error path 2023-01-07 12:07:16 +01:00
mmc
pci This is the 4.9.337 stable release 2023-01-07 13:07:00 +01:00
platform msm: camera: sensor: TOCTOU error handling 2025-02-05 14:07:03 +02:00
radio Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-20 2023-01-19 15:42:12 +01:00
rc media: imon: fix a race condition in send_packet() 2023-01-07 12:07:17 +01:00
spi
tuners Merge remote-tracking branch 'common/android-4.9-q' into android12-4.9-sdm845 2022-03-31 22:52:51 +03:00
usb UPSTREAM: USB: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format 2025-02-06 16:16:59 +02:00
v4l2-core Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into android13-4.9-sdm845 2023-01-06 17:47:31 +02:00
cec-edid.c
Kconfig
Makefile
media-device.c media: mc-device.c: don't memset __user pointer contents 2019-08-04 09:33:16 +02:00
media-devnode.c
media-entity.c