| commit | 9329e7b03c6998cae2d2ba75dd697b07147f3830 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Thu May 17 04:58:25 2018 -0400 |
| committer | Mauro Carvalho Chehab <mchehab+samsung@kernel.org> | Mon May 28 16:12:07 2018 -0400 |
| tree | c95948a0b01d4ce22dbde827b287fa894e23e6dd | |
| parent | a3d71f256c8a8b5d51ea0dfd09cd85ce3a09d9e1 [diff] |
media: vivid: potential integer overflow in vidioc_g_edid()
If we pick a very large "edid->blocks" value then the "edid->start_block
+ edid->blocks" addition could wrap around.
Fixes: ef834f7836ec ("[media] vivid: add the video capture and output parts")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>