surface-duo-oss-platform.ve.../drivers/cam_sync
Trishansh Bhardwaj 8839726f67 msm: camera: sync: Prevent OOB access of sync name
Issue:
strlcpy calls strlen on src ptr. If src is not NULL terminated then OOB
access will occur in below stack.
  strlen
  strlcpy
  cam_sync_init_row
  cam_sync_handle_create
  cam_sync_dev_ioctl

Fix:
Pad user-space supplied name with NULL.

CRs-Fixed: 3010262
Change-Id: Ib5c2fbfe395025ec05e0bb2980f86111e95ff54c
Signed-off-by: Trishansh Bhardwaj <tbhardwa@codeaurora.org>
2021-08-20 07:35:58 +00:00
..
cam_sync.c msm: camera: sync: Prevent OOB access of sync name 2021-08-20 07:35:58 +00:00
cam_sync_api.h msm: camera: sync: Add SYNC_V4L_EVENT_V2 support in sync driver 2020-08-16 11:14:20 +05:30
cam_sync_private.h msm: camera: sync: Increase V4l2 queue size to 250 2020-10-20 22:37:50 -07:00
cam_sync_util.c msm: camera: core: Add delay detection support 2021-06-28 07:58:28 -07:00
cam_sync_util.h msm: camera: sync: Fix imports for types 2020-09-18 16:11:21 -07:00