linux-uconsole/drivers/media
Mauro Carvalho Chehab 81afd3a2f3 cx24116: fix a buffer overflow when checking userspace params
commit 1fa2337a31 upstream.

The maximum size for a DiSEqC command is 6, according to the
userspace API. However, the code allows to write up much more values:
	drivers/media/dvb-frontends/cx24116.c:983 cx24116_send_diseqc_msg() error: buffer overflow 'd->msg' 6 <= 23

Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2015-08-03 09:29:44 -07:00
..
common media: siano: fix divide error on 0 counters 2013-09-26 17:18:27 -07:00
dvb-core media: dmxdev: remove dvb_ringbuffer_flush() on writer side 2013-07-28 16:30:21 -07:00
dvb-frontends cx24116: fix a buffer overflow when checking userspace params 2015-08-03 09:29:44 -07:00
firewire [media] demux.h: Remove duplicated enum 2013-04-08 06:53:15 -03:00
i2c smiapp: Take mutex during PLL update in sensor initialisation 2015-01-27 07:52:32 -08:00
mmc [media] siano: get rid of CammelCase from smscoreapi.h 2013-03-21 10:03:16 -03:00
parport [media] v4l2: pass std by value to the write-only s_std ioctl 2013-03-24 06:47:00 -03:00
pci media: cx18: fix kernel oops with tda8290 tuner 2014-10-05 14:54:14 -07:00
platform media: s5p-mfc: fix mmap support for 64bit arch 2015-04-19 10:10:50 +02:00
radio Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media 2013-06-18 06:25:08 -10:00
rc media/rc: Send sync space information on the lirc device 2015-02-26 17:48:49 -08:00
tuners media: xc4000: Fix get_frequency() 2014-09-17 09:03:57 -07:00
usb stk1160: Make sure current buffer is released 2015-05-06 21:56:27 +02:00
v4l2-core media: v4l2-common: fix overflow in v4l_bound_align_image() 2014-11-14 08:47:56 -08:00
Kconfig [media] Fix build when drivers are builtin and frontend modules 2013-06-20 10:35:53 -03:00
Makefile [media] move i2c files into drivers/media/i2c 2012-09-06 18:42:54 -03:00
media-device.c media: media-device: Remove duplicated memset() in media_enum_entities() 2014-09-17 09:03:57 -07:00
media-devnode.c [media] media: Add 64--32 bit compat ioctl handler 2013-03-18 20:44:36 -03:00
media-entity.c