tree c95948a0b01d4ce22dbde827b287fa894e23e6dd
parent a3d71f256c8a8b5d51ea0dfd09cd85ce3a09d9e1
author Dan Carpenter <dan.carpenter@oracle.com> 1526547505 -0400
committer Mauro Carvalho Chehab <mchehab+samsung@kernel.org> 1527538327 -0400

media: vivid: potential integer overflow in vidioc_g_edid()

If we pick a very large "edid->blocks" value then the "edid->start_block
+ edid->blocks" addition could wrap around.

Fixes: ef834f7836ec ("[media] vivid: add the video capture and output parts")

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>