Sakari Ailus 5400770e31 media: v4l: ioctl: Fix memory leak in video_usercopy ... commit fb18802a338b36f675a388fc03d2aa504a0d0899 upstream. When an IOCTL with argument size larger than 128 that also used array arguments were handled, two memory allocations were made but alas, only the latter one of them was released. This happened because there was only a single local variable to hold such a temporary allocation. Fix this by adding separate variables to hold the pointers to the temporary allocations. Reported-by: Arnd Bergmann <arnd@kernel.org> Reported-by: syzbot+1115e79c8df6472c612b@syzkaller.appspotmail.com Fixes: d14e6d76eb ("[media] v4l: Add multi-planar ioctl handling code") Cc: stable@vger.kernel.org Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Acked-by: Arnd Bergmann <arnd@arndb.de> Acked-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-03-07 12:34:16 +01:00
..
cec	media: cec: add stm32 driver	2021-02-03 23:28:37 +01:00
common	media: Revert "media: videobuf2: Fix length check for single plane dmabuf queueing"	2021-01-30 13:55:17 +01:00
dvb-core	media fixes for v5.9-rc7	2020-09-24 09:05:04 -07:00
dvb-frontends	media: dvb-frontends/drxk_hard.c: fix uninitialized variable warning	2020-10-08 14:15:14 +02:00
firewire	media: firewire: fix memory leak	2020-09-27 11:29:45 +02:00
i2c	media: i2c: max9286: fix access to unallocated memory	2021-03-04 11:38:33 +01:00
mc	media: mc-device.c: change media_device_request_alloc to match media_ioctl_info	2020-08-29 08:15:23 +02:00
mmc	media updates for v5.8-rc1	2020-06-03 20:59:38 -07:00
pci	media: smipcie: fix interrupt handling and IR timeout	2021-03-04 11:38:34 +01:00
platform	media: marvell-ccic: power up the device on mclk enable	2021-03-04 11:38:34 +01:00
radio	Linux 5.9-rc4	2020-09-07 16:13:06 +02:00
rc	media: mceusb: sanity check for prescaler value	2021-03-07 12:34:04 +01:00
spi	media: i2c/Kconfig: use sub-menus for I2C support	2020-04-16 10:34:40 +02:00
test-drivers	media: vidtv: psi: fix missing crc for PMT	2021-03-04 11:37:43 +01:00
tuners	media: qm1d1c0042: fix error return code in qm1d1c0042_init()	2021-03-04 11:37:43 +01:00
usb	media: uvcvideo: Allow entities with no pads	2021-03-07 12:34:12 +01:00
v4l2-core	media: v4l: ioctl: Fix memory leak in video_usercopy	2021-03-07 12:34:16 +01:00
Kconfig	media: media/test_drivers: rename to test-drivers	2020-04-16 10:38:31 +02:00
Makefile	media: media/test_drivers: rename to test-drivers	2020-04-16 10:38:31 +02:00