Hans Verkuil 47af3cecd5 media: v4l2-tpg: array index could become negative ... commit e5f71a27fa upstream. text[s] is a signed char, so using that as index into the font8x16 array can result in negative indices. Cast it to u8 to be safe. Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Reported-by: syzbot+ccf0a61ed12f2a7313ee@syzkaller.appspotmail.com Cc: <stable@vger.kernel.org> # for v4.7 and up Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-01-09 17:38:47 +01:00
..
b2c2	media: lgdt330x: convert it to the new I2C binding way	2018-05-04 11:09:26 -04:00
saa7146	media: saa7146: fix error return from master_xfer	2018-05-11 11:30:57 -04:00
siano	siano: get rid of an unused return code for debugfs register	2018-08-08 10:57:14 -04:00
v4l2-tpg	media: v4l2-tpg: array index could become negative	2019-01-09 17:38:47 +01:00
videobuf2	media: vb2: check memory model for VIDIOC_CREATE_BUFS	2019-01-09 17:38:47 +01:00
btcx-risc.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
cx2341x.c	[media] media: Drop FSF's postal address from the source code files	2017-01-27 11:38:09 -02:00
cypress_firmware.c	media: drivers: improve a size determination	2017-09-23 08:20:57 -04:00
cypress_firmware.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
Kconfig	media: drivers/media/common/videobuf2: rename from videobuf	2018-01-23 08:05:02 -05:00
Makefile	media: drivers/media/common/videobuf2: rename from videobuf	2018-01-23 08:05:02 -05:00
tveeprom.c	[media] tveeprom: get rid of unused arg on tveeprom_hauppauge_analog()	2017-03-03 07:35:02 -03:00