15ecef70ed
commit 14a22762c3daeac59a5a534e124acbb4d7a79b3a upstream.
The current logic allows word to be less than 2. If this happens,
there will be buffer overflows, as reported by smatch. Add extra
checks to prevent it.
While here, remove an unused word = 0 assignment.
Fixes: 6c96dbbc2aa9 ("[media] s5p-jpeg: add support for 5433")
Cc: stable@vger.kernel.org
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Reviewed-by: Jacek Anaszewski <jacek.anaszewski@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
||
|---|---|---|
| .. | ||
| am437x | ||
| atmel | ||
| cadence | ||
| coda | ||
| davinci | ||
| exynos | ||
| exynos-gsc | ||
| exynos4-is | ||
| marvell-ccic | ||
| mtk-jpeg | ||
| mtk-mdp | ||
| mtk-vcodec | ||
| mtk-vpu | ||
| omap | ||
| omap3isp | ||
| qcom | ||
| rcar-vin | ||
| rockchip/rga | ||
| s3c-camif | ||
| s5p-g2d | ||
| s5p-jpeg | ||
| s5p-mfc | ||
| sti | ||
| stm32 | ||
| sunxi | ||
| ti-vpe | ||
| vsp1 | ||
| xilinx | ||
| aspeed-video.c | ||
| fsl-viu.c | ||
| imx-pxp.c | ||
| imx-pxp.h | ||
| Kconfig | ||
| m2m-deinterlace.c | ||
| Makefile | ||
| mx2_emmaprp.c | ||
| pxa_camera.c | ||
| rcar-fcp.c | ||
| rcar_drif.c | ||
| rcar_fdp1.c | ||
| rcar_jpu.c | ||
| renesas-ceu.c | ||
| sh_vou.c | ||
| via-camera.c | ||
| via-camera.h | ||
| video-mux.c | ||