linux/drivers/media/i2c
Guennadi Liakhovetski cfece5857c [media] V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel from user-space
Commit 75e2bdad89 "ov7670: allow
configuration of image size, clock speed, and I/O method" uses a wrong
index to iterate an array. Apart from being wrong, it also uses an
unchecked value from user-space, which can cause access to unmapped
memory in the kernel, triggered by a normal desktop user with rights to
use V4L2 devices.

Signed-off-by: Guennadi Liakhovetski <g.liakhovetski@gmx.de>
Acked-by: Jonathan Corbet <corbet@lwn.net>
Cc: stable@vger.kernel.org
Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
2014-05-13 20:03:02 -03:00
..
cx25840
m5mols [media] media_tree: Fix spelling errors 2013-12-09 14:50:50 -02:00
s5c73m3 [media] s5c73m3: Add missing rename of v4l2_of_get_next_endpoint() function 2014-04-15 09:49:54 -03:00
smiapp [media] videodev2: Set vb2_rect's width and height as unsigned 2014-01-07 08:02:39 -02:00
soc_camera [media] videodev2: Set vb2_rect's width and height as unsigned 2014-01-07 08:02:39 -02:00
ad9389b.c [media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid 2014-03-11 10:13:15 -03:00
adp1653.c
adv7170.c
adv7175.c
adv7180.c [media] adv7180: free an interrupt on failure paths in init_device() 2014-03-24 17:23:09 -03:00
adv7183_regs.h [media] media_tree: Fix spelling errors 2013-12-09 14:50:50 -02:00
adv7183.c treewide: Fix typo in printk 2013-10-14 15:24:22 +02:00
adv7343_regs.h
adv7343.c [media] of: move graph helpers from drivers/media/v4l2-core to drivers/of 2014-03-06 17:41:22 +01:00
adv7393_regs.h
adv7393.c
adv7511.c [media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid 2014-03-11 10:13:15 -03:00
adv7604.c [media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid 2014-03-11 10:13:15 -03:00
adv7842.c [media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid 2014-03-11 10:13:15 -03:00
ak881x.c
aptina-pll.c
aptina-pll.h
as3645a.c
bt819.c
bt856.c
bt866.c
cs53l32a.c
cs5345.c
ir-kbd-i2c.c [media] rc: abstract access to allowed/enabled protocols 2014-03-11 13:24:39 -03:00
Kconfig Merge branch 'topic/exynos' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media 2014-04-05 13:10:00 -07:00
ks0127.c
ks0127.h
lm3560.c [media] lm3560: prevent memory leak in case of pdata absence 2014-03-11 09:56:39 -03:00
lm3646.c [media] lm3646: add new dual LED Flash driver 2014-03-11 10:00:26 -03:00
m52790.c
Makefile [media] V4L: Add driver for s5k6a3 image sensor 2014-03-14 10:32:17 -03:00
ml86v7667.c [media] ml86v7667: fix compile warning: 'ret' set but not used 2013-09-03 09:24:17 -03:00
msp3400-driver.c
msp3400-driver.h
msp3400-kthreads.c
mt9m032.c [media] videodev2: Set vb2_rect's width and height as unsigned 2014-01-07 08:02:39 -02:00
mt9p031.c Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media 2014-04-04 09:50:07 -07:00
mt9t001.c [media] mt9t001: Add clock support 2014-02-24 13:11:40 -03:00
mt9v011.c [media, edac] Change my email address 2014-02-07 08:03:07 -02:00
mt9v032.c [media] mt9v032: Check return value of clk_prepare_enable/clk_set_rate 2014-02-24 13:14:12 -03:00
noon010pc30.c
ov7640.c
ov7670.c [media] V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel from user-space 2014-05-13 20:03:02 -03:00
ov9650.c [media] ov9650: off by one in ov965x_enum_frame_sizes() 2013-08-24 04:54:17 -03:00
s5k4ecgx.c
s5k5baf.c [media] of: move graph helpers from drivers/media/v4l2-core to drivers/of 2014-03-06 17:41:22 +01:00
s5k6a3.c [media] V4L: Add driver for s5k6a3 image sensor 2014-03-14 10:32:17 -03:00
s5k6aa.c [media] s5k6aa: off by one in s5k6aa_enum_frame_interval() 2013-08-24 04:54:09 -03:00
saa711x_regs.h [media] saa7115: Implement i2c_board_info.platform_data 2013-08-18 08:27:07 -03:00
saa717x.c
saa6588.c [media] saa6588: add support for non-blocking mode 2014-01-07 07:42:19 -02:00
saa6752hs.c [media] saa6752hs: move to media/i2c 2014-01-07 07:39:17 -02:00
saa7110.c
saa7115.c [media] media_tree: Fix spelling errors 2013-12-09 14:50:50 -02:00
saa7127.c
saa7185.c
saa7191.c
saa7191.h
smiapp-pll.c [media] smiapp-pll: Add a few comments to PLL calculation 2013-08-22 11:38:25 -03:00
smiapp-pll.h
sony-btf-mpx.c
sr030pc30.c [media, edac] Change my email address 2014-02-07 08:03:07 -02:00
tda7432.c
tda9840.c
tea6415c.c
tea6415c.h
tea6420.c
tea6420.h
ths7303.c [media] ths7303: Declare as static a private function 2013-12-09 14:50:51 -02:00
ths8200_regs.h
ths8200.c [media] ths8200: Format adjustment 2014-02-28 14:29:05 -03:00
tlv320aic23b.c
tvaudio.c
tvp514x_regs.h
tvp514x.c [media] of: move graph helpers from drivers/media/v4l2-core to drivers/of 2014-03-06 17:41:22 +01:00
tvp5150_reg.h
tvp5150.c [media] tvp5150: Make debug module parameter visible in sysfs 2014-03-11 09:27:49 -03:00
tvp7002_reg.h
tvp7002.c [media] of: move graph helpers from drivers/media/v4l2-core to drivers/of 2014-03-06 17:41:22 +01:00
tw2804.c
tw9903.c
tw9906.c
uda1342.c
upd64031a.c
upd64083.c
vp27smpx.c
vpx3220.c
vs6624_regs.h
vs6624.c [media] v4l: vs6624: Fix warning due to unused function 2013-12-10 16:03:36 -02:00
wm8739.c
wm8775.c [media] wm8775: fix broken audio routing 2013-11-29 14:34:54 -02:00