mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-08-04 08:17:46 +00:00
4843a543fa
If reg_r() fails, then gspca_dev->usb_buf was left uninitialized, and some drivers used the contents of that buffer in logic. This caused several syzbot errors: https://syzkaller.appspot.com/bug?extid=397fd082ce5143e2f67d https://syzkaller.appspot.com/bug?extid=1a35278dd0ebfb3a038a https://syzkaller.appspot.com/bug?extid=06ddf1788cfd048c5e82 I analyzed the gspca drivers and zeroed the buffer where needed. Reported-and-tested-by: syzbot+1a35278dd0ebfb3a038a@syzkaller.appspotmail.com Reported-and-tested-by: syzbot+397fd082ce5143e2f67d@syzkaller.appspotmail.com Reported-and-tested-by: syzbot+06ddf1788cfd048c5e82@syzkaller.appspotmail.com Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org> |
||
|---|---|---|
| .. | ||
| gl860 | ||
| m5602 | ||
| stv06xx | ||
| autogain_functions.c | ||
| benq.c | ||
| conex.c | ||
| cpia1.c | ||
| dtcs033.c | ||
| etoms.c | ||
| finepix.c | ||
| gspca.c | ||
| gspca.h | ||
| jeilinj.c | ||
| jl2005bcd.c | ||
| jpeg.h | ||
| Kconfig | ||
| kinect.c | ||
| konica.c | ||
| Makefile | ||
| mars.c | ||
| mr97310a.c | ||
| nw80x.c | ||
| ov519.c | ||
| ov534.c | ||
| ov534_9.c | ||
| pac207.c | ||
| pac7302.c | ||
| pac7311.c | ||
| pac_common.h | ||
| se401.c | ||
| se401.h | ||
| sn9c20x.c | ||
| sn9c2028.c | ||
| sn9c2028.h | ||
| sonixb.c | ||
| sonixj.c | ||
| spca500.c | ||
| spca501.c | ||
| spca505.c | ||
| spca506.c | ||
| spca508.c | ||
| spca561.c | ||
| spca1528.c | ||
| sq905.c | ||
| sq905c.c | ||
| sq930x.c | ||
| stk014.c | ||
| stk1135.c | ||
| stk1135.h | ||
| stv0680.c | ||
| sunplus.c | ||
| t613.c | ||
| topro.c | ||
| touptek.c | ||
| tv8532.c | ||
| vc032x.c | ||
| vicam.c | ||
| w996Xcf.c | ||
| xirlink_cit.c | ||
| zc3xx-reg.h | ||
| zc3xx.c | ||