ad533c5aa3
[ Upstream commit 102fb77c2deb0df3683ef8ff7a6f4cf91dc456e2 ] At several positions in dvb_frontend.c, memdup_user() is utilized to copy userspace arrays. This is done without overflow checks. Use the new wrapper memdup_array_user() to copy the arrays more safely. Link: https://lore.kernel.org/linux-media/20231102191633.52592-2-pstanner@redhat.com Suggested-by: Dave Airlie <airlied@redhat.com> Signed-off-by: Philipp Stanner <pstanner@redhat.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| dmxdev.c | ||
| dvb_ca_en50221.c | ||
| dvb_demux.c | ||
| dvb_frontend.c | ||
| dvb_math.c | ||
| dvb_net.c | ||
| dvb_ringbuffer.c | ||
| dvb_vb2.c | ||
| dvbdev.c | ||