diff options
| author | Benoit Sevens <bsevens@google.com> | 2024-11-07 14:22:02 +0000 |
|---|---|---|
| committer | Michael Bestas <mkbestas@lineageos.org> | 2025-02-06 16:33:11 +0200 |
| commit | e0e1da8d88d98c525de4bc330c06902d3ebc8bf0 (patch) | |
| tree | c1ce94a0035322df9a81ad36e40788801ed8fc22 /net/lapb/lapb_timer.c | |
| parent | 886942382000e42d8608c09bb93e24107b40b848 (diff) | |
UPSTREAM: USB: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
This can lead to out of bounds writes since frames of this type were not
taken into account when calculating the size of the frames buffer in
uvc_parse_streaming.
Fixes: c0efd232929c ("V4L/DVB (8145a): USB Video Class driver")
Signed-off-by: Benoit Sevens <bsevens@google.com>
Cc: stable@vger.kernel.org
Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 378455392
(cherry picked from commit ecf2b43018da9579842c774b7f35dbe11b5c38dd)
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I959a6374ba7adf021fc19da755f5c7611fef9b8c
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions