Arnd Bergmann
917791e434
media: subdev: disallow ioctl for saa6588/davinci
...
commit 0a7790be182d32b9b332a37cb4206e24fe94b728 upstream.
The saa6588_ioctl() function expects to get called from other kernel
functions with a 'saa6588_command' pointer, but I found nothing stops it
from getting called from user space instead, which seems rather dangerous.
The same thing happens in the davinci vpbe driver with its VENC_GET_FLD
command.
As a quick fix, add a separate .command() callback pointer for this
driver and change the two callers over to that. This change can easily
get backported to stable kernels if necessary, but since there are only
two drivers, we may want to eventually replace this with a set of more
specialized callbacks in the long run.
Fixes: c3fda7f835 ("V4L/DVB (10537): saa6588: convert to v4l2_subdev.")
Cc: stable@vger.kernel.org
Signed-off-by: Arnd Bergmann <arnd@arndb.de>
Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-07-19 08:53:17 +02:00
..
davinci
media: davinci/vpfe_capture.c: drop unused format descriptions
2019-07-25 06:30:00 -04:00
drv-intf
media: media/platform: don't set description in ENUM_FMT
2019-07-22 14:43:59 -04:00
i2c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
tpg
cec-notifier.h
media: cec-notifier: add new notifier functions
2019-06-27 07:19:43 -04:00
cec-pin.h
cec.h
media: cec: add struct cec_connector_info support
2019-06-27 07:18:43 -04:00
demux.h
dmxdev.h
dvb-usb-ids.h
media: dvbsky: add support for eyeTV Geniatech T2 lite
2020-02-01 09:34:47 +00:00
dvb_ca_en50221.h
dvb_demux.h
dvb_frontend.h
media: dvb_frontend.h: Fix shifting signed 32-bit value problem
2019-08-14 05:04:08 -03:00
dvb_math.h
dvb_net.h
dvb_ringbuffer.h
dvb_vb2.h
dvbdev.h
media: docs: fix minor typos
2019-06-05 11:31:51 -04:00
fwht-ctrls.h
h264-ctrls.h
media: uapi: h264: Get rid of the p0/b0/b1 ref-lists
2019-08-19 13:24:04 -03:00
imx.h
media-dev-allocator.h
media: Fix Media Controller API config checks
2021-07-14 16:53:15 +02:00
media-device.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174
2019-05-30 11:26:41 -07:00
media-devnode.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174
2019-05-30 11:26:41 -07:00
media-entity.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174
2019-05-30 11:26:41 -07:00
media-request.h
mpeg2-ctrls.h
rc-core.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 285
2019-06-05 17:36:37 +02:00
rc-map.h
media: rc: compile rc-cec.c into rc-core
2021-03-17 17:03:40 +01:00
rcar-fcp.h
soc_camera.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
tuner-types.h
tuner.h
tveeprom.h
v4l2-async.h
media: v4l2-async: Add v4l2_async_notifier_add_fwnode_remote_subdev
2019-07-25 08:03:03 -04:00
v4l2-clk.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
v4l2-common.h
media: v4l2-core: introduce a helper to unregister a i2c subdev
2019-08-26 10:52:06 -03:00
v4l2-ctrls.h
media: v4l: ctrls: Add debug messages
2019-07-25 06:26:49 -04:00
v4l2-dev.h
v4l2-device.h
media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros
2020-02-24 08:36:36 +01:00
v4l2-dv-timings.h
v4l2-event.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174
2019-05-30 11:26:41 -07:00
v4l2-fh.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 174
2019-05-30 11:26:41 -07:00
v4l2-flash-led-class.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
v4l2-fwnode.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 206
2019-05-30 11:29:53 -07:00
v4l2-image-sizes.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
v4l2-ioctl.h
media: v4l: ctrls: Add debug messages
2019-07-25 06:26:49 -04:00
v4l2-mc.h
v4l2-mediabus.h
media: v4l2-fwnode: Return -EINVAL for invalid bus-type
2020-12-30 11:51:08 +01:00
v4l2-mem2mem.h
Linux 5.2-rc4
2019-06-11 12:09:28 -04:00
v4l2-rect.h
media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
2020-02-11 04:35:14 -08:00
v4l2-subdev.h
media: subdev: disallow ioctl for saa6588/davinci
2021-07-19 08:53:17 +02:00
videobuf-core.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 237
2019-06-19 17:09:07 +02:00
videobuf-dma-contig.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 237
2019-06-19 17:09:07 +02:00
videobuf-dma-sg.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 237
2019-06-19 17:09:07 +02:00
videobuf-vmalloc.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 237
2019-06-19 17:09:07 +02:00
videobuf2-core.h
media: vb2: Introduce a vb2_get_buffer accessor
2019-06-21 16:20:23 -04:00
videobuf2-dma-contig.h
videobuf2-dma-sg.h
videobuf2-dvb.h
videobuf2-memops.h
videobuf2-v4l2.h
videobuf2-vmalloc.h
vp8-ctrls.h
media: uapi: new file needs types.h
2019-07-23 08:19:32 -04:00
vsp1.h