linux_dsm_epyc7002/drivers/media
Yong Zhi c7cbef1fdb media: intel-ipu3: cio2: fix a crash with out-of-bounds access
When dmabuf is used for BLOB type frame, the frame
buffers allocated by gralloc will hold more pages
than the valid frame data due to height alignment.

In this case, the page numbers in sg list could exceed the
FBPT upper limit value - max_lops(8)*1024 to cause crash.

Limit the LOP access to the valid data length
to avoid FBPT sub-entries overflow.

Signed-off-by: Yong Zhi <yong.zhi@intel.com>
Signed-off-by: Cao Bing Bu <bingbu.cao@intel.com>
Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
2018-01-05 12:43:20 -05:00
..
cec media: cec: move cec autorepeat handling to rc-core 2017-12-14 10:35:30 -05:00
common media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
dvb-core media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
dvb-frontends media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
firewire media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
i2c media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
mmc media: move dvb kAPI headers to include/media 2017-12-28 13:16:01 -05:00
pci media: intel-ipu3: cio2: fix a crash with out-of-bounds access 2018-01-05 12:43:20 -05:00
platform media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
radio media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
rc media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
spi
tuners media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
usb media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
v4l2-core media: replace all <spaces><tab> occurrences 2018-01-04 13:15:05 -05:00
Kconfig media: fix usage of whitespaces and on indentation 2018-01-04 13:12:01 -05:00
Makefile
media-device.c
media-devnode.c
media-entity.c