A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-15 09:14:18 -04:00
Code Issues Projects Releases Packages Wiki Activity
android_kernel_motorola_sm6375/drivers
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Vikash Garodia 45e1a910b6 FROMGIT: media: venus: hfi: add check to handle incorrect queue size 
qsize represents size of shared queued between driver and video
firmware. Firmware can modify this value to an invalid large value. In
such situation, empty_space will be bigger than the space actually
available. Since new_wr_idx is not checked, so the following code will
result in an OOB write.
...
qsize = qhdr->q_size

if (wr_idx >= rd_idx)
 empty_space = qsize - (wr_idx - rd_idx)
....
if (new_wr_idx < qsize) {
 memcpy(wr_ptr, packet, dwords << 2) --> OOB write

Add check to ensure qsize is within the allocated size while
reading and writing packets into the queue.

Cc: stable@vger.kernel.org
Fixes: d96d3f30c0 ("[media] media: venus: hfi: add Venus HFI files")
Reviewed-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org>
CRs-Fixed: 3935673
Change-Id: Ifb907d4a4c82f853081492e06e68180476367ed5
Git-commit: 69baf245b23e20efda0079238b27fc63ecf13de1
Git-repo: https://gitlab.freedesktop.org/linux-media/media-committers.git
Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com>
2025-03-17 02:10:51 -07:00
..
accessibility
acpi This is the 5.4.281 stable release 2024-07-31 16:27:42 +00:00
amba
android Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
ata ata: libata-core: Fix double free on error 2024-07-05 09:08:31 +02:00
atm atm: idt77252: fix a memleak in open_card_ubr0 2024-02-23 08:25:06 +01:00
auxdisplay
base Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
bcma
block Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
bluetooth Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
bus Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
cdrom
char Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
clk Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
clocksource Merge android11-5.4.265+ (a34cc1d) into msm-5.4 2024-02-29 15:10:56 +05:30
connector
counter
cpufreq Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
cpuidle
crypto Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
dax
dca
devfreq Merge android11-5.4.259+ (81334f2) into msm-5.4 2023-12-18 15:40:18 +05:30
dio
dma Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
dma-buf Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
edac Merge android11-5.4.268+ (66f4b04) into msm-5.4 2024-04-10 23:53:13 -07:00
eisa
extcon Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
firewire firewire: nosy: ensure user_length is taken into account when fetching packet contents 2024-05-17 11:43:54 +02:00
firmware Merge "Merge 222ee0825f on remote branch" into kernel.lnx.5.4.r9-rel 2024-12-13 04:26:14 -08:00
fpga
fsi
gnss
gpio gpio: davinci: Validate the obtained number of IRQs 2024-07-05 09:08:28 +02:00
gpu Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
greybus greybus: Fix use-after-free bug in gb_interface_release due to race condition. 2024-07-05 09:08:20 +02:00
hid Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
hsi
hv hv_utils: drain the timesync packets on onchannelcallback 2024-07-05 09:08:20 +02:00
hwmon Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
hwspinlock
hwtracing Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
i2c Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
i3c Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
ide
idle
iio Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
infiniband This is the 5.4.280 stable release 2024-07-19 13:19:29 +00:00
input Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
interconnect Merge android11-5.4.268+ (66f4b04) into msm-5.4 2024-04-10 23:53:13 -07:00
iommu Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
ipack
irqchip Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
isdn
leds Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
lightnvm
macintosh macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" 2024-06-16 13:28:35 +02:00
mailbox
mcb mcb: fix error handling for different scenarios when parsing 2023-11-28 16:50:19 +00:00
md Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
media FROMGIT: media: venus: hfi: add check to handle incorrect queue size 2025-03-17 02:10:51 -07:00
memory
memstick
message
mfd Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
misc Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
mmc Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
mtd Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
mux
net Merge 222ee0825f on remote branch 2024-12-10 11:36:48 -08:00
nfc Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
ntb
nubus
nvdimm nd_btt: Make BTT lanes preemptible 2023-11-20 10:30:12 +01:00
nvme nvme-multipath: find NUMA path only for online numa-node 2024-07-18 11:40:52 +02:00
nvmem Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
of Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
opp
oprofile
parisc
parport parport: parport_serial: Add Brainboxes device IDs and geometry 2024-01-25 14:34:21 -08:00
pci Merge 222ee0825f on remote branch 2024-12-10 11:36:48 -08:00
pcmcia pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() 2023-11-20 10:30:14 +01:00
perf Merge android11-5.4.259+ (81334f2) into msm-5.4 2023-12-18 15:40:18 +05:30
phy Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
pinctrl Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
platform msm: mhi_dev: Breaking memory for event request in smaller chunks 2025-02-09 22:58:05 -08:00
pnp PNP: ACPI: fix fortify warning 2024-02-23 08:24:54 +01:00
power Merge "Merge android11-5.4.278(7453ecf) into msm-5.4" 2024-10-28 01:05:28 -07:00
powercap
pps
ps3
ptp ptp: Fix error message on failed pin verification 2024-07-05 09:08:11 +02:00
pwm Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
rapidio
ras
regulator Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
remoteproc
reset This is the 5.4.268 stable release 2024-01-26 02:15:05 +00:00
rpmsg Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
rtc Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
s390 s390/sclp: Fix sclp_init() cleanup on failure 2024-07-27 10:38:31 +02:00
sbus
scsi Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
sfi
sh
siox
slimbus Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
soc Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
soundwire soundwire: cadence: fix invalid PDI offset 2024-06-16 13:28:41 +02:00
spi Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
spmi
ssb
staging Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
target scsi: target: Fix SELinux error when systemd-modules loads the target module 2024-05-17 11:43:51 +02:00
tc
tee
thermal thermal: qcom: Add support to update tsens trip based on nvmem data 2024-07-14 00:15:53 -07:00
thunderbolt
tty Merge android11-5.4.281 (d62984a) into msm-5.4 2024-10-29 01:43:17 -07:00
uio Merge android11-5.4.268+ (66f4b04) into msm-5.4 2024-04-10 23:53:13 -07:00
usb UPSTREAM: usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK 2025-02-28 10:03:30 +05:30
vfio Merge 5.4.274 into android11-5.4-lts 2024-04-18 07:23:10 +00:00
vhost This is the 5.4.275 stable release 2024-05-15 16:00:38 +00:00
video Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
virt
virtio Merge android11-5.4.278(7453ecf) into msm-5.4 2024-10-15 16:13:40 +05:30
visorbus
vlynq
vme
w1
watchdog watchdog: stm32_iwdg: initialize default timeout 2024-03-26 18:22:24 -04:00
xen xen/events: close evtchn after mapping cleanup 2024-04-13 12:51:29 +02:00
zorro
Kconfig
Makefile
OWNERS