This can lead to out of bounds writes since frames of this type were not
taken into account when calculating the size of the frames buffer in
uvc_parse_streaming.
CVE-2024-53104
Change-Id: I3dd74072f3b41bab05634f24cfaf8f35a6fae43f
Fixes: c0efd23292 ("V4L/DVB (8145a): USB Video Class driver")
Signed-off-by: Benoit Sevens <bsevens@google.com>
Cc: stable@vger.kernel.org
Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
Signed-off-by: Tao Huang <huangtao@rock-chips.com>
(cherry picked from commit ecf2b43018da9579842c774b7f35dbe11b5c38dd)
Since the report buffer is used by all kinds of drivers in various ways, let's
zero-initialize it during allocation to make sure that it can't be ever used
to leak kernel memory via specially-crafted report.
CVE-2024-50302
Change-Id: I949eb045a8e7fdc0be118d2899d9d957395067f1
Fixes: 27ce405039 ("HID: fix data access in implement()")
Reported-by: Benoît Sevens <bsevens@google.com>
Acked-by: Benjamin Tissoires <bentiss@kernel.org>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
Signed-off-by: Tao Huang <huangtao@rock-chips.com>
(cherry picked from commit 177f25d1292c7e16e1199b39c85480f7f8815552)
This ERRATA affected the Cortex-A7 and present in r0p2, r0p3, r0p4, r0p5.
Make sure that ARM errata 814220 is selected by
RK3036/RK3126/RK3128/RK3228/RK3229/RV1103B/RV1106B/
RV1103/RV1106/RV1107/RV1108/RV1109/RV1126/RK3506.
Change-Id: I98685e57abcecc668e43197344f57973f1eeebaf
Signed-off-by: Tao Huang <huangtao@rock-chips.com>
NV20 and NV30 is supported by DRM core, so it's unused now.
Signed-off-by: Sandy Huang <hjc@rock-chips.com>
Change-Id: I87083c3aa232e416334bb83c2d965c860ddd0a9b
if isp state already START add scale auto update at frame end
Signed-off-by: Mingwei Yan <mingwei.yan@rock-chips.com>
Change-Id: I84d63afb87100072a16d69951e635e78c87f9b2c
When an eMMC error occurs due to changes in hardware conditions
(such as temperature, voltage, etc.), it may not return to normal
without reinitializing the eMMC. In this case, adding hardware
reset and reinitialization can solve the problem.
Change-Id: Ie2164175c59402d06fcb0d774aaba6d712f947d9
Signed-off-by: Yifeng Zhao <yifeng.zhao@rock-chips.com>
Design frequency is 166MHz, overclocking may cause stability issues.
Signed-off-by: Yifeng Zhao <yifeng.zhao@rock-chips.com>
Change-Id: Ia0b4bf630c1033badc6ca23bd5b0af9b2c9b2eb7
Adjust config based on RGA2 limit.
Update driver version to 1.3.7
Signed-off-by: Yu Qiaowei <cerf.yu@rock-chips.com>
Change-Id: I2954dbb36a1698e34da14fff33fb9d97792478da
1. Core component of a new driver for InvenSense ICM-42670 devices.
It includes registers definition, main probe/setup, and device
utility functions.
2. Add SPI driver for InvenSense ICM-42670 devices.
3. Add I2C driver for InvenSense ICM-42670 devices.
The ICM-42670-P is a high performance 6-axis MEMS MotionTracking
device that combines a 3-axis gyroscope and a 3-axis accelerometer.
It has a configurable host interface that supports I3CSM, I2C, and
SPI serial communication, features up to 2.25 Kbytes FIFO
and 2 programmable interrupts with ultra-lowpower wake-on-motion
support to minimize system power consumption
Change-Id: Ic308640f989ba6391eacca36f898dfc964054056
Signed-off-by: HangYu Li <hangyu.li@rock-chips.com>
Some application draw XRGB format the X value may be not 0xff,
If transfer this value to next level mix will appear overlay error.
Signed-off-by: Sandy Huang <hjc@rock-chips.com>
Change-Id: I16d0e848325acefc4c0ab950d7bddaec82231cc1
OTP[120]-OTP[127] is used with no ecc, so when read nvmem, it will
cause the following error:
rk3506-buildroot:/sys/bus/nvmem/devices/rockchip-otp0# busybox hexdump nvmem
[ 38.601435] rockchip-otp ff4f0000.otp: ecc check error during read setup
hexdump: nvmem: Input/output error
Change-Id: Ia2d0aa892c75aa09fd3d4b1d65576f5313a765c4
Signed-off-by: Liang Chen <cl@rock-chips.com>
There are many cases in which the company name is misspelled.
The patch fixes these typos.
Signed-off-by: Tao Huang <huangtao@rock-chips.com>
Change-Id: I411ebaa06789a720f1f2512d6c8ba4481ea9ee8f
There are many cases in which the company name is misspelled.
The patch fixes these typos.
Signed-off-by: Tao Huang <huangtao@rock-chips.com>
Change-Id: I9a8b715d75470afc3cd87d99e311d4c081360687
There are many cases in which the company name is misspelled.
The patch fixes these typos.
Signed-off-by: Tao Huang <huangtao@rock-chips.com>
Change-Id: I57159fb70fa8341458c0538bafe686dbfd5531e9
When the horizontal input exceeds 2k (here refers to 1996), need to switch
from BI-cubic to BI-linear. When there is an HSD(horizontal scale down),
need to check the horizontal input after the HSD.
pick from 2c2f6687dc9a("video: rockchip: rga3: improve the resolution limitation of VSP")
Signed-off-by: Yu Qiaowei <cerf.yu@rock-chips.com>
Change-Id: I9a3fe9db7b2eabfe503237e3b6af27d45751c50b
