linux_dsm_epyc7002/drivers/media
Xi Wang 32898a1454 [media] zoran: fix integer overflow in setup_window()
`clipcount' is from userspace and thus needs validation.  Otherwise,
a large `clipcount' could overflow the vmalloc() size, leading to
out-of-bounds access.

| setup_window()
| zoran_s_fmt_vid_overlay()
| __video_do_ioctl()
| video_ioctl2()

Use 2048 as the maximum `clipcount'.  Also change the corresponding
parameter type to `unsigned int'.

Signed-off-by: Xi Wang <xi.wang@gmail.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
2012-04-19 09:11:25 -03:00
..
common [media] fc0011: Reduce number of retries 2012-04-09 14:54:11 -03:00
dvb [media] mxl111sf: remove an unused variable 2012-04-09 14:57:20 -03:00
radio [media] radio-gemtek: add PnP support for AOpen FX-3D/Pro Radio 2012-04-10 19:53:19 -03:00
rc [media] ati_remote: add support for Medion X10 Digitainer remote 2012-04-11 02:05:46 -03:00
video [media] zoran: fix integer overflow in setup_window() 2012-04-19 09:11:25 -03:00
Kconfig [media] DVB: dvb-net, make the kconfig text helpful 2011-07-27 17:53:09 -03:00
Makefile [media] media: Entities, pads and links 2011-03-22 04:53:10 -03:00
media-device.c [media] media: fix truncated entity specification 2011-12-20 09:31:50 -02:00
media-devnode.c [media] media: Initialize the media core with subsys_initcall() 2012-03-19 19:02:22 -03:00
media-entity.c [media] media: Properly handle link flags in link setup, link notify callback 2011-04-17 07:43:32 -03:00