public-mirrors/linux
1
0
Fork 0
mirror of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-08-05 16:54:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
linux/drivers/media/platform
History
Lv Yunlong 01fe904c9a media: exynos4-is: Fix a use after free in isp_video_release 
In isp_video_release, file->private_data is freed via
_vb2_fop_release()->v4l2_fh_release(). But the freed
file->private_data is still used in v4l2_fh_is_singular_file()
->v4l2_fh_is_singular(file->private_data), which is a use
after free bug.

My patch uses a variable 'is_singular_file' to avoid the uaf.
v3: https://lore.kernel.org/patchwork/patch/1419058/

Fixes: 34947b8aeb ("[media] exynos4-is: Add the FIMC-IS ISP capture DMA driver")
Signed-off-by: Lv Yunlong <lyl2019@mail.ustc.edu.cn>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
2021-06-02 13:17:24 +02:00
..
allegro-dvt media: allegro: change kernel-doc comment blocks to normal comments 2021-04-09 13:17:27 +02:00
am437x media: am437x: fix pm_runtime_get_sync() usage count 2021-05-10 11:36:33 +02:00
atmel media: atmel: properly get pm_runtime 2021-05-10 11:36:33 +02:00
cadence
coda media: coda: use pm_runtime_resume_and_get() 2021-05-19 09:51:42 +02:00
davinci media: davinci: fix two kernel-doc comments 2021-05-20 16:05:45 +02:00
exynos-gsc media: exynos-gsc: fix pm_runtime_get_sync() usage count 2021-05-10 11:36:34 +02:00
exynos4-is media: exynos4-is: Fix a use after free in isp_video_release 2021-06-02 13:17:24 +02:00
imx-jpeg media: imx-jpeg: Fix double free in mxc_jpeg_remove 2021-04-09 12:54:49 +02:00
marvell-ccic media: marvel-ccic: fix some issues when getting pm_runtime 2021-05-10 11:36:33 +02:00
meson/ge2d media: meson-ge2d: fix rotation parameters 2021-04-15 13:19:28 +02:00
mtk-jpeg media: mtk-jpeg: use pm_runtime_resume_and_get() 2021-05-19 09:51:42 +02:00
mtk-mdp media: mdk-mdp: fix pm_runtime_get_sync() usage count 2021-05-10 11:36:33 +02:00
mtk-vcodec media: mtk-vcodec: fix PM runtime get logic 2021-05-10 11:36:34 +02:00
mtk-vpu media: mtk-vpu/mtk_vpu.h: fix kernel-doc warnings 2021-03-22 12:59:50 +01:00
omap
omap3isp media: omap3isp: Acquire graph mutex for graph traversal 2021-04-06 14:34:20 +02:00
qcom media: camss: move to use request_irq by IRQF_NO_AUTOEN flag 2021-06-02 12:57:40 +02:00
rcar-vin media: rcar-vin: use pm_runtime_resume_and_get() 2021-05-20 16:02:44 +02:00
rockchip media: rkisp1: use pm_runtime_resume_and_get() 2021-05-20 16:02:43 +02:00
s3c-camif media: s3c-camif: use pm_runtime_resume_and_get() 2021-05-20 16:02:43 +02:00
s5p-g2d
s5p-jpeg media: s5p-jpeg: fix pm_runtime_get_sync() usage count 2021-05-10 11:36:34 +02:00
s5p-mfc media: s5p-mfc: use pm_runtime_resume_and_get() 2021-05-20 16:02:43 +02:00
sti media: sti/hva: use pm_runtime_resume_and_get() 2021-05-19 09:51:42 +02:00
stm32 media: stm32: use pm_runtime_resume_and_get() 2021-05-20 16:02:43 +02:00
sunxi media: sunxi: use pm_runtime_resume_and_get() 2021-05-20 16:02:43 +02:00
ti-vpe media: ti-vpe: use pm_runtime_resume_and_get() 2021-05-20 16:02:44 +02:00
vsp1 media: vsp1: use pm_runtime_resume_and_get() 2021-05-20 16:02:44 +02:00
xilinx media: platform: xilinx: fix error return code of xvip_graph_init() 2021-03-22 10:19:45 +01:00
aspeed-video.c media: aspeed: fix clock handling logic 2021-03-11 11:59:45 +01:00
fsl-viu.c
imx-pxp.c media: imx-pxp: remove redundant dev_err call in pxp_probe() 2021-04-06 16:09:00 +02:00
imx-pxp.h
Kconfig media: venus : hfi: add venus image info into smem 2021-04-15 13:14:09 +02:00
m2m-deinterlace.c
Makefile media: imx-jpeg: Add V4L2 driver for i.MX8 JPEG Encoder/Decoder 2021-03-22 10:47:21 +01:00
mx2_emmaprp.c
pxa_camera.c
rcar-fcp.c media: rcar-fcp: use pm_runtime_resume_and_get() 2021-05-20 16:02:36 +02:00
rcar_drif.c Revert "media: rcar_drif: fix a memory disclosure" 2021-05-13 17:29:55 +02:00
rcar_fdp1.c media: rcar_fdp1: fix pm_runtime_get_sync() usage count 2021-05-10 11:36:33 +02:00
rcar_jpu.c
renesas-ceu.c media: renesas-ceu: Properly check for PM errors 2021-05-10 11:36:33 +02:00
sh_vou.c media: sh_vou: fix pm_runtime_get_sync() usage count 2021-05-10 11:36:34 +02:00
via-camera.c
via-camera.h
video-mux.c