Parag Singhal
542be35e0e
msm: camera: common: Fix OOB access in bandwidth path handling ...
Invalid input from user can lead to an index going below the valid
range after offset calculation. Existing validation only checked
the upper bound, allowing negative values to pass and cause
out-of-bounds memory access.
Add complete bounds validation to ensure safe access.
CRs-Fixed: 4544133
Change-Id: Ib37b25ab84e9004eaeb216302857d65df18a2516
Signed-off-by: Parag Singhal <parsin@qti.qualcomm.com>
(cherry picked from commit d6cee3f552be8126f0c8b29ea833228bf3357fa8)
2026-07-06 22:42:47 -07:00
msm: camera: memmgr: release buffers after usage
2023-07-13 21:06:48 -07:00
msm: camera: isp: Fix potential illegal access in Acquire HW.
2026-02-09 16:53:24 +05:30
msm: camera: tfe: dump csid clock and path data at overflow
2022-01-19 10:32:57 +05:30
msm: camera: mem_mgr: Add refcount to track in use buffers
2023-06-23 18:52:01 +05:30
msm: camera: common: Fix possible OOB reads and writes operation
2023-12-11 23:28:39 +05:30
msm: camera: icp: io buf config num validation
2026-02-09 16:47:47 +05:30
msm: camera: common: Add missing put_cpu_buf calls
2026-02-09 16:52:18 +05:30
msm: camera: memmgr: release buffers after usage
2023-07-13 21:06:48 -07:00
msm: camera: common: Fix possible OOB reads and writes operation
2023-12-11 23:28:39 +05:30
msm: camera: common: Fix OOB access in bandwidth path handling
2026-07-06 22:42:47 -07:00
msm: camera: memmgr: Add refcount to track umd in use buffers
2024-04-07 17:12:24 +08:00
Merge changes I185381f8,I26ee4c58 into camera-kernel-iot.lnx.4.1
2026-03-03 21:50:18 -08:00
msm: camera: memmgr: Avoid TOCTOU buffer access on multiple use of same fd
2022-08-03 10:04:47 +05:30
msm: camera: sync: Prevent OOB access of sync name
2021-08-20 07:35:58 +00:00
msm: camera: ois: Copy packet header in kernel
2026-02-09 16:52:46 +05:30
542be35e0e