Prabhakar Lad b25db38392 media: platform: davinci: drop VPFE_CMD_S_CCDC_RAW_PARAMS ... drop VPFE_CMD_S_CCDC_RAW_PARAMS ioctl from dm355/dm644x following reasons: - This ioctl was never in public api and was only defined in kernel header. - The function set_params constantly mixes up pointers and phys_addr_t numbers. - This is part of a 'VPFE_CMD_S_CCDC_RAW_PARAMS' ioctl command that is described as an 'experimental ioctl that will change in future kernels'. - The code to allocate the table never gets called after we copy_from_user the user input over the kernel settings, and then compare them for inequality. - We then go on to use an address provided by user space as both the __user pointer for input and pass it through phys_to_virt to come up with a kernel pointer to copy the data to. This looks like a trivially exploitable root hole. Signed-off-by: Lad, Prabhakar <prabhakar.csengg@gmail.com> Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com> Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>		2017-07-26 06:14:33 -04:00
..
am437x	[media] v4l: Switch from V4L2 OF not V4L2 fwnode API	2017-06-06 09:58:16 -03:00
atmel	[media] atmel-isi: code cleanup	2017-06-07 08:36:42 -03:00
blackfin	[media] media: Drop FSF's postal address from the source code files	2017-01-27 11:38:09 -02:00
coda	media: coda: rename the picture run timeout error handler	2017-06-24 09:39:29 -03:00
davinci	media: platform: davinci: drop VPFE_CMD_S_CCDC_RAW_PARAMS	2017-07-26 06:14:33 -04:00
exynos-gsc	[media] v4l2-ioctl/exynos: fix G/S_SELECTION's type handling	2017-06-23 09:20:42 -03:00
exynos4-is	[media] v4l2-ioctl/exynos: fix G/S_SELECTION's type handling	2017-06-23 09:20:42 -03:00
marvell-ccic	[media] media drivers: annotate fall-through	2017-05-19 07:10:03 -03:00
mtk-jpeg	[media] vcodec: mediatek: mark pm functions as __maybe_unused	2017-04-10 06:43:10 -03:00
mtk-mdp	[media] media: mtk-mdp: Fix mdp device tree	2017-06-07 12:31:53 -03:00
mtk-vcodec	Linux 4.12-rc6	2017-06-20 08:51:56 -03:00
mtk-vpu	IOMMU Updates for Linux v4.12	2017-05-09 15:15:47 -07:00
omap	media: v4l: omap_vout: vrfb: Convert to dmaengine	2017-06-24 16:00:25 -03:00
omap3isp	[media] v4l: Switch from V4L2 OF not V4L2 fwnode API	2017-06-06 09:58:16 -03:00
qcom/venus	media: venus: don't abuse dma_alloc for non-DMA allocations	2017-07-26 06:14:32 -04:00
rcar-vin	[media] rcar-vin: fix bug in pixelformat selection	2017-06-06 16:45:49 -03:00
s3c-camif	[media] s3c-camif: fix arguments position in a function call	2017-06-13 14:21:24 -03:00
s5p-cec	[media] s5p_cec: set the CEC_CAP_NEEDS_HPD flag if needed	2017-06-20 06:56:31 -03:00
s5p-g2d	[media] s5p-g2d: Fix error handling	2017-04-05 16:37:15 -03:00
s5p-jpeg	[media] s5p-jpeg: fix recursive spinlock acquisition	2017-06-13 13:56:49 -03:00
s5p-mfc	[media] s5p-mfc: fix spelling mistake: "destionation" -> "destination"	2017-06-13 14:01:10 -03:00
soc_camera	[media] v4l: Switch from V4L2 OF not V4L2 fwnode API	2017-06-06 09:58:16 -03:00
sti	media: bdisp-debug: Replace a seq_puts() call by seq_putc() in seven functions	2017-06-24 09:34:08 -03:00
stm32	[media] cec: add STM32 cec driver	2017-06-13 13:48:18 -03:00
ti-vpe	[media] v4l: Switch from V4L2 OF not V4L2 fwnode API	2017-06-06 09:58:16 -03:00
vimc	media: vimc: set id_table for platform drivers	2017-07-26 05:46:25 -04:00
vivid	[media] stih-cec/vivid/pulse8/rainshadow: use cec_transmit_attempt_done	2017-06-20 06:53:20 -03:00
vsp1	v4l: vsp1: Add API to map and unmap DRM buffers through the VSP	2017-06-09 12:25:38 +01:00
xilinx	[media] v4l: Switch from V4L2 OF not V4L2 fwnode API	2017-06-06 09:58:16 -03:00
Kconfig	media: venus: fix compile-test build on non-qcom ARM platform	2017-07-26 06:14:31 -04:00
Makefile	[media] media: venus: enable building of Venus video driver	2017-06-20 08:53:40 -03:00
arv.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
fsl-viu.c	[media] fsl-viu: use setup_timer	2017-04-10 14:55:57 -03:00
m2m-deinterlace.c	[media] m2m-deinterlace: don't return zero on failure paths in deinterlace_probe()	2017-04-10 14:43:31 -03:00
mx2_emmaprp.c	[media] platform: don't break long lines	2016-10-21 10:06:32 -02:00
pxa_camera.c	[media] v4l: Switch from V4L2 OF not V4L2 fwnode API	2017-06-06 09:58:16 -03:00
rcar-fcp.c	v4l: rcar-fcp: Add an API to retrieve the FCP device	2017-06-09 12:25:36 +01:00
rcar_drif.c	[media] media: platform: rcar_drif: Add DRIF support	2017-06-20 07:07:37 -03:00
rcar_fdp1.c	[media] media: fdp1: Support ES2 platforms	2017-06-20 09:07:44 -03:00
rcar_jpu.c	[media] platform: constify vb2_ops structures	2016-09-19 16:21:06 -03:00
sh_veu.c	[media] vb2: replace void *alloc_ctxs by struct device *alloc_devs	2016-07-08 14:45:07 -03:00
sh_vou.c	[media] media drivers: annotate fall-through	2017-05-19 07:10:03 -03:00
via-camera.c	[media] platform: don't break long lines	2016-10-21 10:06:32 -02:00
via-camera.h	…
video-mux.c	[media] platform: add video-multiplexer subdevice driver	2017-06-20 07:19:49 -03:00
vim2m.c	[media] vim2m: Clean up file handle in open() error path	2017-01-31 07:44:26 -02:00