An error occurred fetching the project authors.
  1. 10 Oct, 2019 3 commits
  2. 19 Aug, 2019 2 commits
  3. 30 Jul, 2019 1 commit
  4. 25 Jul, 2019 1 commit
  5. 22 Jul, 2019 3 commits
  6. 24 Jun, 2019 2 commits
  7. 21 Jun, 2019 1 commit
  8. 30 May, 2019 1 commit
  9. 29 May, 2019 2 commits
  10. 28 May, 2019 2 commits
    • sumitg's avatar
      media: v4l2-core: fix use-after-free error · 3e0f7243
      sumitg authored
      Fixing use-after-free within __v4l2_ctrl_handler_setup().
      Memory is being freed with kfree(new_ref) for duplicate
      control reference entry but ctrl->cluster pointer is still
      referring to freed duplicate entry resulting in error on
      access. Change done to update cluster pointer only when new
      control reference is added.
      
       ==================================================================
       BUG: KASAN: use-after-free in __v4l2_ctrl_handler_setup+0x388/0x428
       Read of size 8 at addr ffffffc324e78618 by task systemd-udevd/312
      
       Allocated by task 312:
      
       Freed by task 312:
      
       The buggy address belongs to the object at ffffffc324e78600
        which belongs to the cache kmalloc-64 of size 64
       The buggy address is located 24 bytes inside of
        64-byte region [ffffffc324e78600, ffffffc324e78640)
       The buggy address belongs to the page:
       page:ffffffbf0c939e00 count:1 mapcount:0 mapping:
      					(null) index:0xffffffc324e78f80
       flags: 0x4000000000000100(slab)
       raw: 4000000000000100 0000000000000000 ffffffc324e78f80 000000018020001a
       raw: 0000000000000000 0000000100000001 ffffffc37040fb80 0000000000000000
       page dumped because: kasan: bad access detected
      
       Memory state around the buggy address:
        ffffffc324e78500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
        ffffffc324e78580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
       >ffffffc324e78600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
                                   ^
        ffffffc324e78680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
        ffffffc324e78700: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
       ==================================================================
      Suggested-by: default avatarHans Verkuil <hverkuil-cisco@xs4all.nl>
      Signed-off-by: default avatarSumit Gupta <sumitg@nvidia.com>
      Signed-off-by: default avatarHans Verkuil <hverkuil-cisco@xs4all.nl>
      Signed-off-by: default avatarMauro Carvalho Chehab <mchehab+samsung@kernel.org>
      3e0f7243
    • Boris Brezillon's avatar
      media: v4l2: Initialize mpeg slice controls · bfe81950
      Boris Brezillon authored
      Make sure the default value at least passes the std_validate() tests.
      Signed-off-by: default avatarBoris Brezillon <boris.brezillon@collabora.com>
      Signed-off-by: default avatarHans Verkuil <hverkuil-cisco@xs4all.nl>
      Signed-off-by: default avatarMauro Carvalho Chehab <mchehab+samsung@kernel.org>
      bfe81950
  11. 21 May, 2019 1 commit
  12. 22 Apr, 2019 1 commit
  13. 29 Mar, 2019 1 commit
  14. 25 Mar, 2019 2 commits
  15. 18 Feb, 2019 1 commit
  16. 16 Jan, 2019 3 commits
  17. 07 Jan, 2019 1 commit
  18. 05 Dec, 2018 1 commit
  19. 03 Dec, 2018 1 commit
  20. 06 Nov, 2018 1 commit
    • Arnd Bergmann's avatar
      media: v4l: fix uapi mpeg slice params definition · df18bfd3
      Arnd Bergmann authored
      We get a headers_check warning about the newly defined ioctl command
      structures:
      
      ./usr/include/linux/v4l2-controls.h:1105: found __[us]{8,16,32,64} type without #include <linux/types.h>
      
      This is resolved by including linux/types.h, as suggested by the
      warning, but there is another problem: Three of the four structures
      have an odd number of __u8 headers, but are aligned to 32 bit in the
      v4l2_ctrl_mpeg2_slice_params, so we get an implicit padding byte
      for each one. To solve that, let's add explicit padding that can
      be set to zero and verified in the kernel.
      
      Fixes: c27bb30e ("media: v4l: Add definitions for MPEG-2 slice format and metadata")
      Signed-off-by: default avatarArnd Bergmann <arnd@arndb.de>
      Signed-off-by: default avatarMauro Carvalho Chehab <mchehab+samsung@kernel.org>
      df18bfd3
  21. 05 Oct, 2018 2 commits
  22. 24 Sep, 2018 2 commits
  23. 11 Sep, 2018 4 commits
  24. 31 Aug, 2018 1 commit