Jozef Balga 312f73b648 media: af9035: prevent buffer overflow on write ...

When less than 3 bytes are written to the device, memcpy is called with
negative array size which leads to buffer overflow and kernel panic. This
patch adds a condition and returns -EOPNOTSUPP instead.
Fixes bugzilla issue 64871

[mchehab+samsung@kernel.org: fix a merge conflict and changed the
 condition to match the patch's comment, e. g. len == 3 could
 also be valid]
Signed-off-by: Jozef Balga <jozef.balga@gmail.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>

2018-08-29 13:54:37 -04:00

..

af9015.c

media: af9015: correct some coding style issues

2018-03-21 14:16:32 -04:00

af9015.h

media: af9015: convert to regmap api

2018-03-21 14:15:34 -04:00

af9035.c

media: af9035: prevent buffer overflow on write

2018-08-29 13:54:37 -04:00

af9035.h

…

anysee.c

…

anysee.h

…

au6610.c

…

au6610.h

…

az6007.c

…

ce6230.c

…

ce6230.h

…

dvb_usb_common.h

…

dvb_usb_core.c

media: dvb: fix location of get_dvb_firmware script

2018-06-15 18:10:01 -03:00

dvb_usb_urb.c

…

dvb_usb.h

media: dvb-usb-v2: add probe/disconnect callbacks

2018-03-21 14:15:09 -04:00

dvbsky.c

media: dvbsky: use just one mutex for serializing device R/W ops

2018-05-10 07:05:14 -04:00

ec168.c

…

ec168.h

…

gl861.c

media: dvb-usb/friio, dvb-usb-v2/gl861: decompose friio and merge with gl861

2018-07-30 08:50:25 -04:00

gl861.h

media: dvb-usb/friio, dvb-usb-v2/gl861: decompose friio and merge with gl861

2018-07-30 08:50:25 -04:00

Kconfig

media: dvb-usb/friio, dvb-usb-v2/gl861: decompose friio and merge with gl861

2018-07-30 08:50:25 -04:00

lmedm04.c

media: dvb: point to the location of the old README.dvb-usb file

2018-06-15 18:10:01 -03:00

lmedm04.h

media: dvb: point to the location of the old README.dvb-usb file

2018-06-15 18:10:01 -03:00

Makefile

…

mxl111sf-demod.c

media: dvb: represent min/max/step/tolerance freqs in Hz

2018-08-02 18:10:48 -04:00

mxl111sf-demod.h

…

mxl111sf-gpio.c

…

mxl111sf-gpio.h

…

mxl111sf-i2c.c

…

mxl111sf-i2c.h

…

mxl111sf-phy.c

…

mxl111sf-phy.h

…

mxl111sf-reg.h

…

mxl111sf-tuner.c

media: dvb: convert tuner_info frequencies to Hz

2018-08-02 16:14:50 -04:00

mxl111sf-tuner.h

…

mxl111sf.c

media: dvb: point to the location of the old README.dvb-usb file

2018-06-15 18:10:01 -03:00

mxl111sf.h

media: dvb: point to the location of the old README.dvb-usb file

2018-06-15 18:10:01 -03:00

rtl28xxu.c

media: rtl28xxu: be sure that it won't go past the array size

2018-08-08 10:57:14 -04:00

rtl28xxu.h

…

usb_urb.c

media: dvb-usb-v2: fix spelling mistake: "completition" -> "completion"

2018-08-03 16:09:22 -04:00

zd1301.c

…