Philipp Stanner 2f50c1ea7f media: drivers/media/dvb-core: copy user arrays safely ... [ Upstream commit 102fb77c2d ] At several positions in dvb_frontend.c, memdup_user() is utilized to copy userspace arrays. This is done without overflow checks. Use the new wrapper memdup_array_user() to copy the arrays more safely. Link: https://lore.kernel.org/linux-media/20231102191633.52592-2-pstanner@redhat.com Suggested-by: Dave Airlie <airlied@redhat.com> Signed-off-by: Philipp Stanner <pstanner@redhat.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-08-29 17:33:34 +02:00
..
dmxdev.c	media: dvb-core: Fix UAF due to refcount races at releasing	2022-11-04 16:56:43 +01:00
dvb_ca_en50221.c	media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221	2023-05-14 16:04:48 +01:00
dvb_demux.c	media: dvb_demux: fix a bug for the continuity counter	2023-05-13 08:20:01 +01:00
dvb_frontend.c	media: drivers/media/dvb-core: copy user arrays safely	2024-08-29 17:33:34 +02:00
dvb_net.c	media: dvb-core: Fix use-after-free due on race condition at dvb_net	2023-05-14 06:30:45 +01:00
dvb_ringbuffer.c	media: dvb_ringbuffer : Fix a bug in dvb_ringbuffer.c	2022-11-25 10:05:25 +00:00
dvb_vb2.c	media: dvb_vb2: fix possible out of bound access	2022-09-27 10:24:44 +02:00
dvbdev.c	media: dvbdev: Initialize sbuf	2024-07-05 09:33:52 +02:00
Kconfig	media: Kconfig: cleanup VIDEO_DEV dependencies	2022-03-18 05:58:35 +01:00
Makefile	lib/math: Move dvb_math.c into lib/math/int_log.c	2023-07-09 22:47:48 +01:00