linux_dsm_epyc7002/drivers/media/usb/dvb-usb-v2
Jozef Balga 312f73b648 media: af9035: prevent buffer overflow on write
When less than 3 bytes are written to the device, memcpy is called with
negative array size which leads to buffer overflow and kernel panic. This
patch adds a condition and returns -EOPNOTSUPP instead.
Fixes bugzilla issue 64871

[mchehab+samsung@kernel.org: fix a merge conflict and changed the
 condition to match the patch's comment, e. g. len == 3 could
 also be valid]
Signed-off-by: Jozef Balga <jozef.balga@gmail.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
2018-08-29 13:54:37 -04:00
..
af9015.c
af9015.h
af9035.c media: af9035: prevent buffer overflow on write 2018-08-29 13:54:37 -04:00
af9035.h
anysee.c
anysee.h
au6610.c
au6610.h
az6007.c
ce6230.c
ce6230.h
dvb_usb_common.h
dvb_usb_core.c
dvb_usb_urb.c
dvb_usb.h
dvbsky.c
ec168.c
ec168.h
gl861.c media: dvb-usb/friio, dvb-usb-v2/gl861: decompose friio and merge with gl861 2018-07-30 08:50:25 -04:00
gl861.h media: dvb-usb/friio, dvb-usb-v2/gl861: decompose friio and merge with gl861 2018-07-30 08:50:25 -04:00
Kconfig media: dvb-usb/friio, dvb-usb-v2/gl861: decompose friio and merge with gl861 2018-07-30 08:50:25 -04:00
lmedm04.c media: dvb: point to the location of the old README.dvb-usb file 2018-06-15 18:10:01 -03:00
lmedm04.h media: dvb: point to the location of the old README.dvb-usb file 2018-06-15 18:10:01 -03:00
Makefile
mxl111sf-demod.c media: dvb: represent min/max/step/tolerance freqs in Hz 2018-08-02 18:10:48 -04:00
mxl111sf-demod.h
mxl111sf-gpio.c
mxl111sf-gpio.h
mxl111sf-i2c.c
mxl111sf-i2c.h
mxl111sf-phy.c
mxl111sf-phy.h
mxl111sf-reg.h
mxl111sf-tuner.c media: dvb: convert tuner_info frequencies to Hz 2018-08-02 16:14:50 -04:00
mxl111sf-tuner.h
mxl111sf.c media: dvb: point to the location of the old README.dvb-usb file 2018-06-15 18:10:01 -03:00
mxl111sf.h media: dvb: point to the location of the old README.dvb-usb file 2018-06-15 18:10:01 -03:00
rtl28xxu.c media: rtl28xxu: be sure that it won't go past the array size 2018-08-08 10:57:14 -04:00
rtl28xxu.h
usb_urb.c media: dvb-usb-v2: fix spelling mistake: "completition" -> "completion" 2018-08-03 16:09:22 -04:00
zd1301.c