Hangyu Hua ac828e2416 media: dvb_vb2: fix possible out of bound access ... commit 37238699073e7e93f05517e529661151173cd458 upstream. vb2_core_qbuf and vb2_core_querybuf don't check the range of b->index controlled by the user. Fix this by adding range checking code before using them. Fixes: 57868acc36 ("media: videobuf2: Add new uAPI for DVB streaming I/O") Signed-off-by: Hangyu Hua <hbh25y@gmail.com> Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-10-05 10:38:40 +02:00
..
cec	media: cec-adap.c: fix is_configuring state	2022-06-09 10:20:55 +02:00
common	media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()	2022-01-27 10:54:16 +01:00
dvb-core	media: dvb_vb2: fix possible out of bound access	2022-10-05 10:38:40 +02:00
dvb-frontends	media: dib8000: Fix a memleak in dib8000_init()	2022-01-27 10:53:54 +01:00
firewire	media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()	2021-11-06 14:10:09 +01:00
i2c	media: ov7670: remove ov7670_power_off from ov7670_remove	2022-06-09 10:21:10 +02:00
mc	media: Fix Media Controller API config checks	2021-07-14 16:55:56 +02:00
mmc	media updates for v5.8-rc1	2020-06-03 20:59:38 -07:00
pci	media: tw686x: Fix memory leak in tw686x_video_init	2022-08-21 15:15:42 +02:00
platform	media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment	2022-08-21 15:15:46 +02:00
radio	media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()	2022-01-27 10:53:51 +01:00
rc	media: mceusb: Use new usb_control_msg_*() routines	2022-09-08 11:11:39 +02:00
spi	media: cxd2880-spi: Fix a null pointer dereference on error handling path	2021-11-18 14:04:04 +01:00
test-drivers	media: vim2m: initialize the media device earlier	2022-05-30 09:33:23 +02:00
tuners	media: msi001: fix possible null-ptr-deref in msi001_probe()	2022-01-27 10:53:56 +01:00
usb	media: flexcop-usb: fix endpoint type check	2022-09-28 11:10:26 +02:00
v4l2-core	media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set	2022-08-21 15:15:41 +02:00
Kconfig	media: correct MEDIA_TEST_SUPPORT help text	2022-01-27 10:54:29 +01:00
Makefile	media: media/test_drivers: rename to test-drivers	2020-04-16 10:38:31 +02:00