diff options
| author | Sakari Ailus <sakari.ailus@linux.intel.com> | 2016-11-08 14:06:44 -0200 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@s-opensource.com> | 2016-11-22 10:31:23 -0200 |
| commit | a56bc171598c788fd43168b5c81df8ac3c7fbde4 (patch) | |
| tree | ee1199981f7ad41d398c101dbcff68a816731089 /kernel/groups.c | |
| parent | af93189d4ebc7851eb387145d0ea8db52698308e (diff) | |
[media] v4l: compat: Prevent allocating excessive amounts of memory
get_v4l2_ext_controls32() is used to convert the 32-bit compat struct into
native 64-bit representation. The function multiplies the array length by
the entry length before validating size. Perform the size validation
first.
Also use unsigned values for size computation.
Make similar changes to get_v4l2_buffer32() for multi-plane buffers.
Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
Diffstat (limited to 'kernel/groups.c')
0 files changed, 0 insertions, 0 deletions