Lao Wei 3aa18ec542 media: fix: media: pci: meye: validate offset to avoid arbitrary access ...

[ Upstream commit eac7230fdb ]

Motion eye video4linux driver for Sony Vaio PictureBook desn't validate user-controlled parameter
'vma->vm_pgoff', a malicious process might access all of kernel memory from user space by trying
pass different arbitrary address.
Discussion: http://www.openwall.com/lists/oss-security/2018/07/06/1

Signed-off-by: Lao Wei <zrlw@qq.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-11-25 09:52:16 +01:00

..

common

media: v4l2-tpg: array index could become negative

2019-01-09 16:16:44 +01:00

dvb-core

media: dvb-core: fix a memory leak bug

2019-10-05 12:30:23 +02:00

dvb-frontends

tua6100: Avoid build warnings.

2019-08-04 09:33:17 +02:00

firewire

media: firewire: Fix app_info parameter type in avc_ca{,_app}_info

2019-01-26 09:38:34 +01:00

i2c

media: ov9650: add a sanity check

2019-10-05 12:30:24 +02:00

mmc

…

pci

media: fix: media: pci: meye: validate offset to avoid arbitrary access

2019-11-25 09:52:16 +01:00

platform

media: omap3isp: Set device on omap3isp subdevs

2019-10-05 12:30:29 +02:00

radio

media: radio/si470x: kill urb on error

2019-10-05 12:30:22 +02:00

rc

media: iguanair: add sanity checks

2019-10-05 12:30:19 +02:00

spi

…

tuners

media: r820t: fix r820t_write_reg for KASAN

2018-02-22 15:43:56 +01:00

usb

media: stkwebcam: fix runtime PM after driver unbind

2019-10-17 13:42:46 -07:00

v4l2-core

media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()

2019-08-04 09:33:27 +02:00

cec-edid.c

…

Kconfig

…

Makefile

…

media-device.c

media: mc-device.c: don't memset __user pointer contents

2019-08-04 09:33:16 +02:00

media-devnode.c

…

media-entity.c

media: entity: Fix stream count check

2017-07-12 15:01:02 +02:00