mirror-linux/drivers/media/platform
Vikash Garodia a1d8f675ea media: venus: hfi: add checks to perform sanity on queue pointers
commit 5e538fce33 upstream.

Read and write pointers are used to track the packet index in the memory
shared between video driver and firmware. There is a possibility of OOB
access if the read or write pointer goes beyond the queue memory size.
Add checks for the read and write pointer to avoid OOB access.

Cc: stable@vger.kernel.org
Fixes: d96d3f30c0 ("[media] media: venus: hfi: add Venus HFI files")
Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com>
Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-11-28 17:07:07 +00:00
..
allegro-dvt
amlogic
amphion media: amphion: handle firmware debug message 2023-11-20 11:52:14 +01:00
aspeed
atmel
cadence media: cadence: csi2rx: Unregister v4l2 async notifier 2023-11-20 11:52:14 +01:00
chips-media
intel
marvell media: v4l: Use correct dependency for camera sensor drivers 2023-10-06 14:56:31 +02:00
mediatek media: mtk-jpegenc: Fix bug in JPEG encode quality selection 2023-11-20 11:52:14 +01:00
nvidia
nxp
qcom media: venus: hfi: add checks to perform sanity on queue pointers 2023-11-28 17:07:07 +00:00
renesas media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE 2023-06-09 10:34:08 +02:00
rockchip
samsung media: s3c-camif: Avoid inappropriate kfree() 2023-11-20 11:52:14 +01:00
st media: bdisp: Add missing check for create_workqueue 2023-05-11 23:03:10 +09:00
sunxi
ti media: Prefer designated initializers over memset for subdev pad ops 2023-05-24 17:32:36 +01:00
verisilicon media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination 2023-11-20 11:52:13 +01:00
via media: via: Use correct dependency for camera sensor drivers 2023-10-06 14:56:32 +02:00
xilinx
Kconfig
Makefile
m2m-deinterlace.c
video-mux.c