Mauro Carvalho Chehab 81afd3a2f3 cx24116: fix a buffer overflow when checking userspace params ...

commit 1fa2337a31 upstream.

The maximum size for a DiSEqC command is 6, according to the
userspace API. However, the code allows to write up much more values:
	drivers/media/dvb-frontends/cx24116.c:983 cx24116_send_diseqc_msg() error: buffer overflow 'd->msg' 6 <= 23

Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2015-08-03 09:29:44 -07:00

..

common

media: siano: fix divide error on 0 counters

2013-09-26 17:18:27 -07:00

dvb-core

media: dmxdev: remove dvb_ringbuffer_flush() on writer side

2013-07-28 16:30:21 -07:00

dvb-frontends

cx24116: fix a buffer overflow when checking userspace params

2015-08-03 09:29:44 -07:00

firewire

[media] demux.h: Remove duplicated enum

2013-04-08 06:53:15 -03:00

i2c

smiapp: Take mutex during PLL update in sensor initialisation

2015-01-27 07:52:32 -08:00

mmc

[media] siano: get rid of CammelCase from smscoreapi.h

2013-03-21 10:03:16 -03:00

parport

[media] v4l2: pass std by value to the write-only s_std ioctl

2013-03-24 06:47:00 -03:00

pci

media: cx18: fix kernel oops with tda8290 tuner

2014-10-05 14:54:14 -07:00

platform

media: s5p-mfc: fix mmap support for 64bit arch

2015-04-19 10:10:50 +02:00

radio

Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media

2013-06-18 06:25:08 -10:00

rc

media/rc: Send sync space information on the lirc device

2015-02-26 17:48:49 -08:00

tuners

media: xc4000: Fix get_frequency()

2014-09-17 09:03:57 -07:00

usb

stk1160: Make sure current buffer is released

2015-05-06 21:56:27 +02:00

v4l2-core

media: v4l2-common: fix overflow in v4l_bound_align_image()

2014-11-14 08:47:56 -08:00

Kconfig

[media] Fix build when drivers are builtin and frontend modules

2013-06-20 10:35:53 -03:00

Makefile

[media] move i2c files into drivers/media/i2c

2012-09-06 18:42:54 -03:00

media-device.c

media: media-device: Remove duplicated memset() in media_enum_entities()

2014-09-17 09:03:57 -07:00

media-devnode.c

[media] media: Add 64--32 bit compat ioctl handler

2013-03-18 20:44:36 -03:00

media-entity.c

[media] media: Add link_validate() op to check links to the sink pad

2012-05-14 08:44:11 -03:00