Oliver Neukum 1d2e6bd4b6 media: dvb: usb: fix use after free in dvb_usb_device_exit ...

[ Upstream commit 6cf97230cd ]

dvb_usb_device_exit() frees and uses the device name in that order.
Fix by storing the name in a buffer before freeing it.

Signed-off-by: Oliver Neukum <oneukum@suse.com>
Reported-by: syzbot+26ec41e9f788b3eba396@syzkaller.appspotmail.com
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-08-04 09:33:15 +02:00

..

airspy

[media] usb: constify vb2_ops structures

2016-09-19 16:20:35 -03:00

as102

media: Don't do DMA on stack for firmware upload in the AS102 driver

2017-11-30 08:39:09 +00:00

au0828

media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()

2019-05-31 06:48:21 -07:00

b2c2

[media] flexcop-usb: don't use stack for DMA

2016-10-14 12:52:29 -03:00

cpia2

media: cpia2: Fix use-after-free in cpia2_exit

2019-05-31 06:48:12 -07:00

cx231xx

media: cx231xx: Add support for AverMedia DVD EZMaker 7

2018-07-03 11:23:15 +02:00

dvb-usb

media: dvb: usb: fix use after free in dvb_usb_device_exit

2019-08-04 09:33:15 +02:00

dvb-usb-v2

media: af9035: prevent buffer overflow on write

2018-10-20 09:51:30 +02:00

em28xx

media: em28xx: Fix misplaced reset of dev->v4l::field_count

2019-01-23 08:10:53 +01:00

go7007

media: go7007: avoid clang frame overflow warning with KASAN

2019-05-31 06:48:30 -07:00

gspca

gspca: konica: add missing endpoint sanity check

2017-05-25 15:44:41 +02:00

hackrf

[media] usb: constify vb2_ops structures

2016-09-19 16:20:35 -03:00

hdpvr

media: hdpvr: Fix an error handling path in hdpvr_probe()

2018-02-17 13:21:13 +01:00

msi2500

[media] usb: constify vb2_ops structures

2016-09-19 16:20:35 -03:00

pvrusb2

media: pvrusb2: Prevent a buffer overflow

2019-05-31 06:48:21 -07:00

pwc

[media] usb: constify vb2_ops structures

2016-09-19 16:20:35 -03:00

s2255

[media] s2255drv: don't use stack for DMA

2016-10-14 12:52:28 -03:00

siano

media: smsusb: better handle optional alignment

2019-06-11 12:22:40 +02:00

stk1160

[media] constify i2c_algorithm structures

2016-09-19 16:27:02 -03:00

stkwebcam

stk-webcam: fix an endian bug in stk_camera_read_reg()

2018-04-29 11:31:57 +02:00

tm6000

media: tm6000: add error handling for dvb_register_adapter

2018-10-03 17:01:46 -07:00

ttusb-budget

[media] dvb: Get rid of typedev usage for enums

2015-06-09 17:47:35 -03:00

ttusb-dec

[media] ttusb_dec: avoid the risk of go past buffer

2016-09-22 14:14:22 -03:00

usbtv

media: usbtv: prevent double free in error case

2018-04-08 12:12:57 +02:00

usbvision

usbvision: fix NULL-deref at probe

2017-05-25 15:44:39 +02:00

uvc

media: uvcvideo: Fix uvc_alloc_entity() allocation alignment

2019-06-11 12:22:46 +02:00

zr364xx

zr364xx: enforce minimum size when reading header

2017-05-25 15:44:42 +02:00

Kconfig

[media] tlg2300: move to staging in preparation for removal

2014-12-16 23:21:43 -02:00

Makefile

[media] tlg2300: move to staging in preparation for removal

2014-12-16 23:21:43 -02:00