Guenter Roeck 7e09f7d5c7 media: uvcvideo: Prevent heap overflow when accessing mapped controls ... The size of uvc_control_mapping is user controlled leading to a potential heap overflow in the uvc driver. This adds a check to verify the user provided size fits within the bounds of the defined buffer size. Originally-from: Richard Simmons <rssimmo@amazon.com> Cc: stable@vger.kernel.org Signed-off-by: Guenter Roeck <linux@roeck-us.net> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>		2017-08-20 08:08:34 -04:00
..
Kconfig	[media] uvc: Depend on VIDEO_V4L2	2013-06-24 22:54:40 -03:00
Makefile
uvc_ctrl.c	media: uvcvideo: Prevent heap overflow when accessing mapped controls	2017-08-20 08:08:34 -04:00
uvc_debugfs.c	[media] uvcvideo: Change result code of debugfs_init to void	2017-01-31 10:56:48 -02:00
uvc_driver.c	media: usb: constify usb_device_id	2017-08-20 08:04:51 -04:00
uvc_entity.c	[media] uvcvideo: register entity subdev on init	2016-01-11 12:19:09 -02:00
uvc_isight.c
uvc_queue.c	[media] uvcvideo: Fix a wrong macro	2017-01-31 10:55:41 -02:00
uvc_status.c	[media] uvcvideo: Fix open/close race condition	2013-06-08 19:51:16 -03:00
uvc_v4l2.c	[media] uvcvideo: freeing an error pointer	2016-11-29 12:05:00 -02:00
uvc_video.c	[media] uvcvideo: annotate a switch fall through	2017-05-19 09:06:07 -03:00
uvcvideo.h	media: uvcvideo: Fix incorrect timeout for Get Request	2017-08-20 08:08:07 -04:00