Guennadi Liakhovetski cfece5857c [media] V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel from user-space ...

Commit 75e2bdad8901a0b599e01a96229be922eef1e488 "ov7670: allow
configuration of image size, clock speed, and I/O method" uses a wrong
index to iterate an array. Apart from being wrong, it also uses an
unchecked value from user-space, which can cause access to unmapped
memory in the kernel, triggered by a normal desktop user with rights to
use V4L2 devices.

Signed-off-by: Guennadi Liakhovetski <g.liakhovetski@gmx.de>
Acked-by: Jonathan Corbet <corbet@lwn.net>
Cc: stable@vger.kernel.org
Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>

2014-05-13 20:03:02 -03:00

..

cx25840

[media] cx25840: remove the v4l2-chip-ident.h include

2013-06-17 08:52:44 -03:00

m5mols

[media] media_tree: Fix spelling errors

2013-12-09 14:50:50 -02:00

s5c73m3

[media] s5c73m3: Add missing rename of v4l2_of_get_next_endpoint() function

2014-04-15 09:49:54 -03:00

smiapp

[media] videodev2: Set vb2_rect's width and height as unsigned

2014-01-07 08:02:39 -02:00

soc_camera

[media] videodev2: Set vb2_rect's width and height as unsigned

2014-01-07 08:02:39 -02:00

ad9389b.c

[media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid

2014-03-11 10:13:15 -03:00

adp1653.c

[media] media: i2c: Convert to devm_kzalloc()

2013-05-21 07:52:15 -03:00

adv7170.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

adv7175.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

adv7180.c

[media] adv7180: free an interrupt on failure paths in init_device()

2014-03-24 17:23:09 -03:00

adv7183_regs.h

[media] media_tree: Fix spelling errors

2013-12-09 14:50:50 -02:00

adv7183.c

treewide: Fix typo in printk

2013-10-14 15:24:22 +02:00

adv7343_regs.h

…

adv7343.c

[media] of: move graph helpers from drivers/media/v4l2-core to drivers/of

2014-03-06 17:41:22 +01:00

adv7393_regs.h

…

adv7393.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

adv7511.c

[media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid

2014-03-11 10:13:15 -03:00

adv7604.c

[media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid

2014-03-11 10:13:15 -03:00

adv7842.c

[media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid

2014-03-11 10:13:15 -03:00

ak881x.c

[media] media/i2c: fill in missing reg->size fields

2013-06-17 08:56:55 -03:00

aptina-pll.c

…

aptina-pll.h

…

as3645a.c

[media] media: i2c: Convert to devm_kzalloc()

2013-05-21 07:52:15 -03:00

bt819.c

[media] bt819: fix querystd

2013-06-17 09:42:17 -03:00

bt856.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

bt866.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

cs53l32a.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

cs5345.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

ir-kbd-i2c.c

[media] rc: abstract access to allowed/enabled protocols

2014-03-11 13:24:39 -03:00

Kconfig

Merge branch 'topic/exynos' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media

2014-04-05 13:10:00 -07:00

ks0127.c

[media] ks0127: fix querystd

2013-06-17 09:42:40 -03:00

ks0127.h

…

lm3560.c

[media] lm3560: prevent memory leak in case of pdata absence

2014-03-11 09:56:39 -03:00

lm3646.c

[media] lm3646: add new dual LED Flash driver

2014-03-11 10:00:26 -03:00

m52790.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

Makefile

[media] V4L: Add driver for s5k6a3 image sensor

2014-03-14 10:32:17 -03:00

ml86v7667.c

[media] ml86v7667: fix compile warning: 'ret' set but not used

2013-09-03 09:24:17 -03:00

msp3400-driver.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

msp3400-driver.h

…

msp3400-kthreads.c

…

mt9m032.c

[media] videodev2: Set vb2_rect's width and height as unsigned

2014-01-07 08:02:39 -02:00

mt9p031.c

Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media

2014-04-04 09:50:07 -07:00

mt9t001.c

[media] mt9t001: Add clock support

2014-02-24 13:11:40 -03:00

mt9v011.c

[media, edac] Change my email address

2014-02-07 08:03:07 -02:00

mt9v032.c

[media] mt9v032: Check return value of clk_prepare_enable/clk_set_rate

2014-02-24 13:14:12 -03:00

noon010pc30.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

ov7640.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

ov7670.c

[media] V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel from user-space

2014-05-13 20:03:02 -03:00

ov9650.c

[media] ov9650: off by one in ov965x_enum_frame_sizes()

2013-08-24 04:54:17 -03:00

s5k4ecgx.c

[media] i2c/s5k4ecgx: fix printk format warning

2012-10-28 16:42:45 -02:00

s5k5baf.c

[media] of: move graph helpers from drivers/media/v4l2-core to drivers/of

2014-03-06 17:41:22 +01:00

s5k6a3.c

[media] V4L: Add driver for s5k6a3 image sensor

2014-03-14 10:32:17 -03:00

s5k6aa.c

[media] s5k6aa: off by one in s5k6aa_enum_frame_interval()

2013-08-24 04:54:09 -03:00

saa711x_regs.h

[media] saa7115: Implement i2c_board_info.platform_data

2013-08-18 08:27:07 -03:00

saa717x.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

saa6588.c

[media] saa6588: add support for non-blocking mode

2014-01-07 07:42:19 -02:00

saa6752hs.c

[media] saa6752hs: move to media/i2c

2014-01-07 07:39:17 -02:00

saa7110.c

[media] saa7110: fix querystd

2013-06-17 09:42:56 -03:00

saa7115.c

[media] media_tree: Fix spelling errors

2013-12-09 14:50:50 -02:00

saa7127.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

saa7185.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

saa7191.c

[media] saa7191: fix querystd

2013-06-17 09:43:44 -03:00

saa7191.h

…

smiapp-pll.c

[media] smiapp-pll: Add a few comments to PLL calculation

2013-08-22 11:38:25 -03:00

smiapp-pll.h

[media] v4l, smiapp, smiapp-pll, adp1653: Update contact information

2012-11-21 13:34:50 -02:00

sony-btf-mpx.c

[media] sony-btf-mpx: Drop needless newline in param description

2013-05-27 08:51:47 -03:00

sr030pc30.c

[media, edac] Change my email address

2014-02-07 08:03:07 -02:00

tda7432.c

[media] media: i2c: Convert to devm_kzalloc()

2013-05-21 07:52:15 -03:00

tda9840.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

tea6415c.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

tea6415c.h

…

tea6420.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

tea6420.h

…

ths7303.c

[media] ths7303: Declare as static a private function

2013-12-09 14:50:51 -02:00

ths8200_regs.h

[media] media: i2c: ths8200: driver for TI video encoder

2013-06-17 09:52:31 -03:00

ths8200.c

[media] ths8200: Format adjustment

2014-02-28 14:29:05 -03:00

tlv320aic23b.c

[media] media: i2c: Convert to devm_kzalloc()

2013-05-21 07:52:15 -03:00

tvaudio.c

Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media

2013-07-13 12:09:57 -07:00

tvp514x_regs.h

…

tvp514x.c

[media] of: move graph helpers from drivers/media/v4l2-core to drivers/of

2014-03-06 17:41:22 +01:00

tvp5150_reg.h

…

tvp5150.c

[media] tvp5150: Make debug module parameter visible in sysfs

2014-03-11 09:27:49 -03:00

tvp7002_reg.h

…

tvp7002.c

[media] of: move graph helpers from drivers/media/v4l2-core to drivers/of

2014-03-06 17:41:22 +01:00

tw2804.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

tw9903.c

[media] media: i2c: Convert to devm_kzalloc()

2013-05-21 07:52:15 -03:00

tw9906.c

[media] media: i2c: Convert to devm_kzalloc()

2013-05-21 07:52:15 -03:00

uda1342.c

[media] media: i2c: Convert to devm_kzalloc()

2013-05-21 07:52:15 -03:00

upd64031a.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

upd64083.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

vp27smpx.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

vpx3220.c

[media] vpx3220: fix querystd

2013-06-17 09:44:21 -03:00

vs6624_regs.h

…

vs6624.c

[media] v4l: vs6624: Fix warning due to unused function

2013-12-10 16:03:36 -02:00

wm8739.c

[media] media/i2c: remove g_chip_ident op

2013-06-17 08:52:10 -03:00

wm8775.c

[media] wm8775: fix broken audio routing

2013-11-29 14:34:54 -02:00