Dan Carpenter 8486f6f9de media: saa7146: fix array overflow in vidioc_s_audio() ... [ Upstream commit 8e4d86e241cf035d6d3467cd346e7ce490681937 ] The "a->index" value comes from the user via the ioctl. The problem is that the shift can wrap resulting in setting "mxb->cur_audinput" to an invalid value, which later results in an array overflow. Fixes: 6680427791 ("[media] mxb: fix audio handling") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-12-30 11:53:31 +01:00
..
cec	media: pulse8-cec: add support for FW v10 and up	2020-12-01 16:20:02 +01:00
common	media: siano: fix memory leak of debugfs members in smsdvb_hotplug	2020-12-30 11:53:22 +01:00
dvb-core	media fixes for v5.9-rc7	2020-09-24 09:05:04 -07:00
dvb-frontends	media: dvb-frontends/drxk_hard.c: fix uninitialized variable warning	2020-10-08 14:15:14 +02:00
firewire	media: firewire: fix memory leak	2020-09-27 11:29:45 +02:00
i2c	media: tvp5150: Fix wrong return value of tvp5150_parse_dt()	2020-12-30 11:53:31 +01:00
mc	media: mc-device.c: change media_device_request_alloc to match media_ioctl_info	2020-08-29 08:15:23 +02:00
mmc	media updates for v5.8-rc1	2020-06-03 20:59:38 -07:00
pci	media: saa7146: fix array overflow in vidioc_s_audio()	2020-12-30 11:53:31 +01:00
platform	media: venus: put dummy vote on video-mem path after last session release	2020-12-30 11:53:13 +01:00
radio	Linux 5.9-rc4	2020-09-07 16:13:06 +02:00
rc	media: mtk-cir: fix calculation of chk period	2020-12-01 16:00:51 +01:00
spi	media: i2c/Kconfig: use sub-menus for I2C support	2020-04-16 10:34:40 +02:00
test-drivers	media: vidtv: fix some warnings	2020-12-08 08:15:49 +01:00
tuners	Linux 5.9-rc4	2020-09-07 16:13:06 +02:00
usb	media: tm6000: Fix sizeof() mismatches	2020-12-30 11:53:10 +01:00
v4l2-core	media: v4l2-fwnode: Return -EINVAL for invalid bus-type	2020-12-30 11:53:11 +01:00
Kconfig	media: media/test_drivers: rename to test-drivers	2020-04-16 10:38:31 +02:00
Makefile	media: media/test_drivers: rename to test-drivers	2020-04-16 10:38:31 +02:00