A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-19 11:11:26 -04:00
Code Issues Projects Releases Packages Wiki Activity
android_kernel_motorola_sm6375/drivers/media
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Hyunwoo Kim 353fd22693 media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 
[ Upstream commit 280a8ab81733da8bc442253c700a52c4c0886ffd ]

If the device node of dvb_ca_en50221 is open() and the
device is disconnected, a UAF may occur when calling
close() on the device node.

The root cause is that wake_up() and wait_event() for
dvbdev->wait_queue are not implemented.

So implement wait_event() function in dvb_ca_en50221_release()
and add 'remove_mutex' which prevents race condition
for 'ca->exit'.

[mchehab: fix a checkpatch warning]

Link: https://lore.kernel.org/linux-media/20221121063308.GA33821@ubuntu
Signed-off-by: Hyunwoo Kim <v4bel@theori.io>
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-06-09 10:28:58 +02:00
..
cec media: cec-adap.c: fix is_configuring state 2022-06-14 18:11:28 +02:00
common media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() 2022-01-27 09:19:43 +01:00
dvb-core media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 2023-06-09 10:28:58 +02:00
dvb-frontends media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table 2023-06-09 10:28:57 +02:00
firewire
i2c media: m5mols: fix off-by-one loop termination error 2023-03-22 13:28:07 +01:00
mc
mmc
pci media: netup_unidvb: fix irq init by register it at the end of probe 2023-06-09 10:28:57 +02:00
platform media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE 2023-06-09 10:28:55 +02:00
radio media: radio-shark: Add endpoint checks 2023-05-30 12:44:10 +01:00
rc media: rc: gpio-ir-recv: Fix support for wake-up 2023-05-17 11:35:38 +02:00
spi
tuners media: msi001: fix possible null-ptr-deref in msi001_probe() 2022-01-27 09:19:34 +01:00
usb media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() 2023-06-09 10:28:57 +02:00
v4l2-core media: videobuf-dma-contig: use dma_mmap_coherent 2023-01-18 11:41:04 +01:00
Kconfig
Makefile