diff options
author | Vikash Garodia <quic_vgarodia@quicinc.com> | 2023-08-10 05:25:03 +0300 |
---|---|---|
committer | Hans Verkuil <hverkuil-cisco@xs4all.nl> | 2023-10-23 13:24:52 +0300 |
commit | 8d0b89398b7ebc52103e055bf36b60b045f5258f (patch) | |
tree | 8a91848cc369bff169e2a445e0ab5fb331d25428 /net/unix/unix_bpf.c | |
parent | b18e36dfd6c935da60a971310374f3dfec3c82e1 (diff) | |
download | linux-8d0b89398b7ebc52103e055bf36b60b045f5258f.tar.xz |
media: venus: hfi: add checks to handle capabilities from firmware
The hfi parser, parses the capabilities received from venus firmware and
copies them to core capabilities. Consider below api, for example,
fill_caps - In this api, caps in core structure gets updated with the
number of capabilities received in firmware data payload. If the same api
is called multiple times, there is a possibility of copying beyond the max
allocated size in core caps.
Similar possibilities in fill_raw_fmts and fill_profile_level functions.
Cc: stable@vger.kernel.org
Fixes: 1a73374a04e5 ("media: venus: hfi_parser: add common capability parser")
Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com>
Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Diffstat (limited to 'net/unix/unix_bpf.c')
0 files changed, 0 insertions, 0 deletions