kernel/linux.git/drivers/media/dvb/dvb-core, branch linux-2.6.16.y

dvb-core: fix bug in CRC-32 checking on 64-bit systems

2007-03-09T07:32:38+00:00

CRC-32 checking during ULE decapsulation always failed on x86_64 systems due to the size of a variable used to store CRC. This bug was discovered on Fedora Core 6 with kernel-2.6.18-1.2849. The i386 counterpart has no such problem. This patch has been tested on 64-bit system as well as 32-bit system. Signed-off-by: Ang Way Chuang Signed-off-by: Michael Krufky Signed-off-by: Adrian Bunk

V4L/DVB: Dvbdev: fix illegal re-usage of fileoperations struct

2007-02-25T23:38:10+00:00

Arjan van de Ven reported an illegal re-usage of the fileoperations struct if more than one dvb device (e.g. frontend) is present. This patch fixes this issue. It allocates a new fileoperations struct each time a device is registered and copies the default template fileops. Signed-off-by: Marcel Siegert Signed-off-by: Michael Krufky Signed-off-by: Adrian Bunk

V4L/DVB: Fix uninitialised variable in dvb_frontend_swzigzag

2007-01-24T18:00:43+00:00

Spotted by coverity/Adrian Bunk. Signed-off-by: Andrew de Quincey Signed-off-by: Adrian Bunk

dvb-core: Proper handling ULE SNDU length of 0 (CVE-2006-4623)

2006-10-13T16:01:44+00:00

ULE (Unidirectional Lightweight Encapsulation RFC 4326) decapsulation code has a bug that allows an attacker to send a malformed ULE packet with SNDU length of 0 and bring down the receiving machine. This patch fix the bug and has been tested on version 2.6.17.11. This bug is 100% reproducible and the modified source code (GPL) used to produce this bug will be posted on http://nrg.cs.usm.my/downloads.htm shortly. The kernel will produce a dump during CRC32 checking on faulty ULE packet. Signed-off-by: Ang Way Chuang Signed-off-by: Adrian Bunk

V4L/DVB (3413): Typos grab bag of the month

2006-03-08T15:30:19+00:00

Typos grab bag of the month. Eyeballed by jmc@ in OpenBSD. Signed-off-by: Alexey Dobriyan Signed-off-by: Oliver Endriss Signed-off-by: Mauro Carvalho Chehab

V4L/DVB (3380): Semaphore to mutex conversion on drivers/media

2006-01-15T11:03:49+00:00

- Semaphore to mutex conversion. The conversion was generated via scripts, and the result was validated automatically via a script as well. Signed-off-by: Ingo Molnar Signed-off-by: Andrew Morton Signed-off-by: Mauro Carvalho Chehab

V4L/DVB (3344a): Conversions from kmalloc+memset to k(z|c)alloc

2006-01-11T21:40:56+00:00

Conversions from kmalloc+memset to k(z|c)alloc. Signed-off-by: Panagiotis Issaris Signed-off-by: Andrew Morton Signed-off-by: Mauro Carvalho Chehab

V4L/DVB (3194): Revert one 64-bit fix and improved other 64-bit fixes

2006-01-09T17:32:43+00:00

- Reverted objectionable fix in saa7146_hlp.c - Merged in improved dvb 64-bit fixes from Peter Beutner. Signed-off-by: Peter Beutner Signed-off-by: Hans Verkuil Signed-off-by: Mauro Carvalho Chehab

V4L/DVB (3218): Whitespace cleanups

2006-01-09T17:25:34+00:00

- minor whitespace cleanups Signed-off-by: Michael Krufky Signed-off-by: Mauro Carvalho Chehab

V4L/DVB (3179): Fix 64-bit compile warnings

2006-01-09T17:25:28+00:00

- Fix 64-bit compile warnings Signed-off-by: Hans Verkuil Signed-off-by: Mauro Carvalho Chehab