android_kernel_samsung_msm8976/drivers/media/v4l2-core
Sakari Ailus a97d6bfec7 media: v4l: ioctl: Validate num_planes for debug messages
commit 7fe9f01c04c2673bd6662c35b664f0f91888b96f upstream.

The num_planes field in struct v4l2_pix_format_mplane is used in a loop
before validating it. As the use is printing a debug message in this case,
just cap the value to the maximum allowed.

Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Reviewed-by: Thierry Reding <treding@nvidia.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
[bwh: Backported to 3.16: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
2019-07-27 22:10:17 +02:00
..
Kconfig
Makefile
tuner-core.c
v4l2-common.c
v4l2-compat-ioctl32.c media: v4l2-compat-ioctl32: prevent go past max size 2019-07-27 21:52:46 +02:00
v4l2-ctrls.c media: v4l2-ctrls.c/uvc: zero v4l2_event 2019-07-27 22:08:54 +02:00
v4l2-dev.c
v4l2-device.c
v4l2-event.c media: v4l: event: Add subscription to list before calling "add" operation 2019-07-27 21:53:04 +02:00
v4l2-fh.c media: v4l: event: Prevent freeing event subscriptions while accessed 2019-07-27 21:51:55 +02:00
v4l2-int-device.c
v4l2-ioctl.c media: v4l: ioctl: Validate num_planes for debug messages 2019-07-27 22:10:17 +02:00
v4l2-mem2mem.c
v4l2-of.c
v4l2-subdev.c
videobuf-core.c
videobuf-dma-contig.c
videobuf-dma-sg.c
videobuf-dvb.c
videobuf-msm-mem.c
videobuf-vmalloc.c
videobuf2-core.c vb2: V4L2_BUF_FLAG_DONE is set after DQBUF 2019-07-27 21:46:35 +02:00
videobuf2-dma-contig.c media: vb2 dma-contig: Fully cache synchronise buffers in prepare and finish 2016-02-19 14:22:39 -08:00
videobuf2-dma-sg.c
videobuf2-memops.c
videobuf2-vmalloc.c