Pavel Skripkin 23e8f46884 media: dvb-usb: fix wrong definition ... commit c680ed46e418e9c785d76cf44eb33bfd1e8cf3f6 upstream. syzbot reported WARNING in vmalloc. The problem was in zero size passed to vmalloc. The root case was in wrong cxusb_bluebird_lgz201_properties definition. adapter array has only 1 entry, but num_adapters was 2. Call Trace: __vmalloc_node mm/vmalloc.c:2963 [inline] vmalloc+0x67/0x80 mm/vmalloc.c:2996 dvb_dmx_init+0xe4/0xb90 drivers/media/dvb-core/dvb_demux.c:1251 dvb_usb_adapter_dvb_init+0x564/0x860 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:184 dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:86 [inline] dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:184 [inline] dvb_usb_device_init.cold+0xc94/0x146e drivers/media/usb/dvb-usb/dvb-usb-init.c:308 cxusb_probe+0x159/0x5e0 drivers/media/usb/dvb-usb/cxusb.c:1634 Fixes: 4d43e13f72 ("V4L/DVB (4643): Multi-input patch for DVB-USB device") Cc: stable@vger.kernel.org Reported-by: syzbot+7336195c02c1bd2f64e1@syzkaller.appspotmail.com Signed-off-by: Pavel Skripkin <paskripkin@gmail.com> Signed-off-by: Sean Young <sean@mess.org> Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-07-14 16:55:37 +02:00
..
cec	media: cec: add stm32 driver	2021-02-03 23:28:37 +01:00
common	media: saa7146: use sg_dma_len when building pgtable	2021-05-14 09:50:22 +02:00
dvb-core	media: dvbdev: Fix memory leak in dvb_media_device_free()	2021-05-11 14:47:38 +02:00
dvb-frontends	media: dvb: Add check on sp8870_readreg return	2021-06-03 09:00:42 +02:00
firewire	media: firewire: fix memory leak	2020-09-27 11:29:45 +02:00
i2c	media: i2c: imx219: Balance runtime PM use-count	2021-05-14 09:50:25 +02:00
mc	media: mc-device.c: change media_device_request_alloc to match media_ioctl_info	2020-08-29 08:15:23 +02:00
mmc	media updates for v5.8-rc1	2020-06-03 20:59:38 -07:00
pci	media: saa7134: use sg_dma_len when building pgtable	2021-05-14 09:50:22 +02:00
platform	Revert "media: rcar_drif: fix a memory disclosure"	2021-05-26 12:06:55 +02:00
radio	Linux 5.9-rc4	2020-09-07 16:13:06 +02:00
rc	media: ite-cir: check for receive overflow	2021-05-11 14:47:24 +02:00
spi	media: i2c/Kconfig: use sub-menus for I2C support	2020-04-16 10:34:40 +02:00
test-drivers	media: vivid: fix assignment of dev->fbuf_out_flags	2021-05-14 09:50:22 +02:00
tuners	media: m88rs6000t: avoid potential out-of-bounds reads on arrays	2021-05-14 09:50:23 +02:00
usb	media: dvb-usb: fix wrong definition	2021-07-14 16:55:37 +02:00
v4l2-core	media: v4l2-ctrls.c: fix race condition in hdl->requests list	2021-05-14 09:50:25 +02:00
Kconfig	media: media/test_drivers: rename to test-drivers	2020-04-16 10:38:31 +02:00
Makefile	media: media/test_drivers: rename to test-drivers	2020-04-16 10:38:31 +02:00