diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2017-08-04 04:07:51 -0400 |
|---|---|---|
| committer | Mauro Carvalho Chehab <mchehab@s-opensource.com> | 2017-08-09 10:35:15 -0400 |
| commit | 7cc7a83394be1db510609d8d2f68c53b63a3ecff (patch) | |
| tree | 2a66584f62ecd57d613031e6b188b8eb39c7f226 /drivers/base | |
| parent | b050d46e4a64ab0b9df9a607a6c4dc7b28e9125b (diff) | |
media: adv7604: Prevent out of bounds access
These can only be accessed with CAP_SYS_ADMIN so it's not a critical
security issue. The problem is that "page" is controlled by the user in
the ioctl(). The test to see if the bit is set in state->info->page_mask
is not sufficient because "page" can be very high and shift wrap around
to a bit which is set.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
Diffstat (limited to 'drivers/base')
0 files changed, 0 insertions, 0 deletions