diff options
| author | Ricardo Ribalda | 2023-07-20 17:46:54 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman | 2023-10-06 14:57:04 +0200 |
| commit | 09635bf4cdd4adf2160198a6041bcc7ca46c0558 (patch) | |
| tree | 37a83a3d46af2385d0e7dad0175c46ca1d6d6e61 /drivers/media/tuners | |
| parent | d6a749e4cab2bb51950baf0dac87822db8833bc9 (diff) | |
media: uvcvideo: Fix OOB read
commit 41ebaa5e0eebea4c3bac96b72f9f8ae0d77c0bdb upstream.
If the index provided by the user is bigger than the mask size, we might do
an out of bound read.
CC: stable@kernel.org
Fixes: 40140eda661e ("media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU")
Reported-by: Zubin Mithra <zsm@chromium.org>
Signed-off-by: Ricardo Ribalda <ribalda@chromium.org>
Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org>
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/media/tuners')
0 files changed, 0 insertions, 0 deletions