Benoit Sevens 9084be5184 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format ... commit ecf2b43018da9579842c774b7f35dbe11b5c38dd upstream. This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming. Fixes: c0efd232929c ("V4L/DVB (8145a): USB Video Class driver") Signed-off-by: Benoit Sevens <bsevens@google.com> Cc: stable@vger.kernel.org Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-11-30 02:33:26 +01:00
..
airspy
as102
au0828
b2c2	media: flexcop-usb: fix sanity check of bNumEndpoints	2024-11-19 12:27:06 +01:00
cpia2
cx231xx
dvb-usb	Revert "media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()""	2024-11-24 00:23:54 +01:00
dvb-usb-v2
em28xx	media: em28xx: annotate unchecked call to media_device_register()	2024-11-19 08:44:51 +01:00
go7007	media: go7007: fix a memleak in go7007_load_encoder	2024-11-19 08:44:55 +01:00
gspca
hackrf
hdpvr
msi2500
pvrusb2	media: pvrusb2: fix uaf in pvr2_context_set_notify	2024-11-19 08:44:55 +01:00
pwc
s2255	media: s2255: Use refcount_t instead of atomic_t for num_channels	2024-11-19 14:19:40 +01:00
siano
stk1160	media: stk1160: fix bounds checking in stk1160_copy_video()	2024-11-19 12:27:06 +01:00
stkwebcam
tm6000
ttusb-budget
ttusb-dec
usbtv	Revert "media: usbtv: Remove useless locks in usbtv_video_free()"	2024-11-24 00:23:11 +01:00
uvc	media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format	2024-11-30 02:33:26 +01:00
zr364xx
Kconfig
Makefile