linux/drivers/media/i2c
Guennadi Liakhovetski 322e6d19ed [media] V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel from user-space
Commit 75e2bdad89 "ov7670: allow
configuration of image size, clock speed, and I/O method" uses a wrong
index to iterate an array. Apart from being wrong, it also uses an
unchecked value from user-space, which can cause access to unmapped
memory in the kernel, triggered by a normal desktop user with rights to
use V4L2 devices.

Signed-off-by: Guennadi Liakhovetski <g.liakhovetski@gmx.de>
Acked-by: Jonathan Corbet <corbet@lwn.net>
Cc: stable@vger.kernel.org
Signed-off-by: Mauro Carvalho Chehab <m.chehab@samsung.com>
2014-05-13 19:58:08 -03:00
..
cx25840 [media] cx25840: remove the v4l2-chip-ident.h include 2013-06-17 08:52:44 -03:00
m5mols [media] media_tree: Fix spelling errors 2013-12-09 14:50:50 -02:00
s5c73m3 [media] s5c73m3: Add missing rename of v4l2_of_get_next_endpoint() function 2014-04-15 09:49:54 -03:00
smiapp [media] smiapp: Use %u for printing u32 value 2014-04-23 16:05:06 -03:00
soc_camera [media] tw9910: add g_tvnorms video op 2014-05-13 19:55:38 -03:00
Kconfig Merge branch 'topic/exynos' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media 2014-04-05 13:10:00 -07:00
Makefile [media] V4L: Add driver for s5k6a3 image sensor 2014-03-14 10:32:17 -03:00
ad9389b.c [media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid 2014-03-11 10:13:15 -03:00
adp1653.c [media] media: i2c: Convert to devm_kzalloc() 2013-05-21 07:52:15 -03:00
adv7170.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
adv7175.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
adv7180.c [media] adv7180: free an interrupt on failure paths in init_device() 2014-03-24 17:23:09 -03:00
adv7183.c treewide: Fix typo in printk 2013-10-14 15:24:22 +02:00
adv7183_regs.h [media] media_tree: Fix spelling errors 2013-12-09 14:50:50 -02:00
adv7343.c [media] of: move graph helpers from drivers/media/v4l2-core to drivers/of 2014-03-06 17:41:22 +01:00
adv7343_regs.h
adv7393.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
adv7393_regs.h
adv7511.c [media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid 2014-03-11 10:13:15 -03:00
adv7604.c [media] adv*: replace the deprecated v4l2_subdev_edid by v4l2_edid 2014-03-11 10:13:15 -03:00
adv7842.c [media] adv7842: Disable access to EDID DDC lines before chip power up 2014-04-16 18:22:02 -03:00
ak881x.c [media] media/i2c: fill in missing reg->size fields 2013-06-17 08:56:55 -03:00
aptina-pll.c
aptina-pll.h
as3645a.c [media] media: i2c: Convert to devm_kzalloc() 2013-05-21 07:52:15 -03:00
bt819.c [media] bt819: fix querystd 2013-06-17 09:42:17 -03:00
bt856.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
bt866.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
cs53l32a.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
cs5345.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
ir-kbd-i2c.c [media] rc: abstract access to allowed/enabled protocols 2014-03-11 13:24:39 -03:00
ks0127.c [media] ks0127: fix querystd 2013-06-17 09:42:40 -03:00
ks0127.h
lm3560.c [media] lm3560: prevent memory leak in case of pdata absence 2014-03-11 09:56:39 -03:00
lm3646.c [media] lm3646: add new dual LED Flash driver 2014-03-11 10:00:26 -03:00
m52790.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
ml86v7667.c [media] ml86v7667: fix compile warning: 'ret' set but not used 2013-09-03 09:24:17 -03:00
msp3400-driver.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
msp3400-driver.h
msp3400-kthreads.c
mt9m032.c [media] videodev2: Set vb2_rect's width and height as unsigned 2014-01-07 08:02:39 -02:00
mt9p031.c Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media 2014-04-04 09:50:07 -07:00
mt9t001.c [media] mt9t001: Add clock support 2014-02-24 13:11:40 -03:00
mt9v011.c [media, edac] Change my email address 2014-02-07 08:03:07 -02:00
mt9v032.c [media] mt9v032: Check return value of clk_prepare_enable/clk_set_rate 2014-02-24 13:14:12 -03:00
noon010pc30.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
ov7640.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
ov7670.c [media] V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel from user-space 2014-05-13 19:58:08 -03:00
ov9650.c [media] ov9650: off by one in ov965x_enum_frame_sizes() 2013-08-24 04:54:17 -03:00
s5k4ecgx.c [media] i2c/s5k4ecgx: fix printk format warning 2012-10-28 16:42:45 -02:00
s5k5baf.c [media] of: move graph helpers from drivers/media/v4l2-core to drivers/of 2014-03-06 17:41:22 +01:00
s5k6a3.c [media] V4L: Add driver for s5k6a3 image sensor 2014-03-14 10:32:17 -03:00
s5k6aa.c [media] s5k6aa: off by one in s5k6aa_enum_frame_interval() 2013-08-24 04:54:09 -03:00
saa711x_regs.h [media] saa7115: Implement i2c_board_info.platform_data 2013-08-18 08:27:07 -03:00
saa717x.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
saa6588.c [media] saa6588: add support for non-blocking mode 2014-01-07 07:42:19 -02:00
saa6752hs.c [media] saa6752hs: move to media/i2c 2014-01-07 07:39:17 -02:00
saa7110.c [media] saa7110: fix querystd 2013-06-17 09:42:56 -03:00
saa7115.c [media] media_tree: Fix spelling errors 2013-12-09 14:50:50 -02:00
saa7127.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
saa7185.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
saa7191.c [media] saa7191: fix querystd 2013-06-17 09:43:44 -03:00
saa7191.h
smiapp-pll.c [media] smiapp-pll: Add a few comments to PLL calculation 2013-08-22 11:38:25 -03:00
smiapp-pll.h [media] smiapp: Make PLL flags unsigned long 2014-04-23 11:29:21 -03:00
sony-btf-mpx.c [media] sony-btf-mpx: Drop needless newline in param description 2013-05-27 08:51:47 -03:00
sr030pc30.c [media, edac] Change my email address 2014-02-07 08:03:07 -02:00
tda7432.c [media] media: i2c: Convert to devm_kzalloc() 2013-05-21 07:52:15 -03:00
tda9840.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
tea6415c.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
tea6415c.h
tea6420.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
tea6420.h
ths7303.c [media] ths7303: Declare as static a private function 2013-12-09 14:50:51 -02:00
ths8200.c [media] ths8200: Format adjustment 2014-02-28 14:29:05 -03:00
ths8200_regs.h [media] media: i2c: ths8200: driver for TI video encoder 2013-06-17 09:52:31 -03:00
tlv320aic23b.c [media] media: i2c: Convert to devm_kzalloc() 2013-05-21 07:52:15 -03:00
tvaudio.c Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media 2013-07-13 12:09:57 -07:00
tvp514x.c [media] of: move graph helpers from drivers/media/v4l2-core to drivers/of 2014-03-06 17:41:22 +01:00
tvp514x_regs.h
tvp5150.c [media] tvp5150: Make debug module parameter visible in sysfs 2014-03-11 09:27:49 -03:00
tvp5150_reg.h
tvp7002.c [media] of: move graph helpers from drivers/media/v4l2-core to drivers/of 2014-03-06 17:41:22 +01:00
tvp7002_reg.h
tw2804.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
tw9903.c [media] media: i2c: Convert to devm_kzalloc() 2013-05-21 07:52:15 -03:00
tw9906.c [media] media: i2c: Convert to devm_kzalloc() 2013-05-21 07:52:15 -03:00
uda1342.c [media] media: i2c: Convert to devm_kzalloc() 2013-05-21 07:52:15 -03:00
upd64031a.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
upd64083.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
vp27smpx.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
vpx3220.c [media] vpx3220: fix querystd 2013-06-17 09:44:21 -03:00
vs6624.c [media] v4l: vs6624: Fix warning due to unused function 2013-12-10 16:03:36 -02:00
vs6624_regs.h
wm8739.c [media] media/i2c: remove g_chip_ident op 2013-06-17 08:52:10 -03:00
wm8775.c [media] wm8775: fix broken audio routing 2013-11-29 14:34:54 -02:00